Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5213
HistoryOct 03, 2017 - 5:44 a.m.

Open Redirect

2017-10-0305:44:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.001 Low

EPSS

Percentile

50.4%

WordPress is vulnerable to open redirect attacks. It is possible because the library does not properly validate the external URL in wp_http_referer in wp-admin/edit-tag-form.php and wp-admin/user-edit.php, allowing attackers to redirect users to a different website.