Input validation vulnerability in Short URL 1.6.4

The Short URL plugin for WordPress is vulnerable to a type of cyber attack known as SQL Injection. This vulnerability affects versions up to and including 1.6.4. It occurs when the ‘idLink’ parameter of the reset_link() function, which is called via an AJAX action, is not properly escaped and prepared for user supplied parameters. This makes it possible for an attacker with minimal permissions, such as a subscriber, to append additional queries to the existing SQL query which can extract sensitive information from the database.