CVE-2021-25033 Noptin < 1.6.5 - Open Redirect

2022-02-1409:20:45

CWE-601

WPScan

www.cve.org

0.001 Low

EPSS

Percentile

41.6%

JSON

The WordPress Newsletter Plugin WordPress plugin before 1.6.5 does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue

CNA Affected

[
  {
    "product": "WordPress Newsletter Plugin – Noptin",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.6.5",
        "status": "affected",
        "version": "1.6.5",
        "versionType": "custom"
      }
    ]
  }
]