CVE-2017-1000434

WordPress Furikake plugin version 0.1.0 is vulnerable to an Open Redirect. The issue occurs via the furikake-redirect parameter, where the code uses header('location:'.urldecode($_GET['furikake-redirect'])) without validation, redirecting users to an attacker-controlled URL. Impact is unauthentic...