CVE-2021-25028

Summary: CVE-2021-25028 affects the WordPress Event Tickets plugin up to version 5.2.1 (before 5.2.2). The vulnerability is an open redirect: the plugin does not validate the tribe_tickets_redirect_to parameter before redirecting, enabling arbitrary redirects. The issue is documented across multi...