Lucene search

K
wpvulndbWpvulndbWPVDB-ID:C1C6A8F5-16E8-41B9-B365-DD8AC5556791
HistoryNov 23, 2023 - 12:00 a.m.

Responsive Column Widgets <= 1.2.7 - Open Redirect via responsive_column_widgets_link

2023-11-2300:00:00
wpscan.com
3
wordpress
plugin
open redirect
vulnerability
responsive column widgets
version 1.2.7
insufficient validation
unauthenticated attackers
malicious sites

7 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

Description The Responsive Column Widgets plugin for WordPress is vulnerable to Open Redirect in versions up to, and including, 1.2.7. This is due to insufficient validation on the redirect url supplied via the responsive_column_widgets_link parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.

7 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

Related for WPVDB-ID:C1C6A8F5-16E8-41B9-B365-DD8AC5556791