Lucene search
Krzysztof ZającWPEX-ID:AF548FAB-96C2-4129-B609-E24AAD0B1FC4HistoryMar 29, 2022 - 12:00 a.m.
English WordPress Admin < 1.5.2 - Unauthenticated Open Redirect
2022-03-2900:00:00
Krzysztof Zając
52
0.001 Low
EPSS
Percentile
43.6%
The plugin does not validate the admin_custom_language_return_url before redirecting users o it, leading to an open redirect issue
https://example.com/wp-admin/admin-ajax.php?action=heartbeat&admin_custom_language_toggle=1&admin_custom_language_return_url=https://wpscan.comRelated
nvd
nvd
CVE-2021-25111
2022-04-25 16:16:07
cve
cve
CVE-2021-25111
2022-04-25 16:16:07
prion
prion
Open redirect
2022-04-25 16:16:00
cvelist
cvelist
wpvulndb
wpvulndb
English WordPress Admin < 1.5.2 - Unauthenticated Open Redirect
2022-03-29 00:00:00
nuclei
nuclei
WordPress English Admin <1.5.2 - Open Redirect
2022-04-29 20:19:48
patchstack
patchstack