CVE-2021-24406

The WordPress wpForo Forum plugin (versions prior to 1.9.7) has an open redirect vulnerability in the login form caused by not validating the redirect_to parameter. This can allow an attacker to redirect users to a malicious site after login, potentially enabling credential exposure or phishing. ...