Lucene search
ChannchanWPVDB-ID:C2D2384C-41B9-4AAF-B918-C1CFDA58AF5CHistoryJan 17, 2022 - 12:00 a.m.
Noptin < 1.6.5 - Open Redirect
2022-01-1700:00:00
Channchan
wpscan.com
26
0.001 Low
EPSS
Percentile
41.6%
The plugin does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue
PoC
https://example.com/?noptin_ns=email_click&to;=https://wpscan.com
| CPE | Name | Operator | Version |
|---|---|---|---|
| newsletter-optin-box | lt | 1.6.5 |
Related
patchstack
patchstack
WordPress Noptin plugin <= 1.6.4 - Open Redirect vulnerability
2022-01-17 00:00:00
wpexploit
wpexploit
Noptin < 1.6.5 - Open Redirect
2022-01-17 00:00:00
nuclei
nuclei
Noptin < 1.6.5 - Open Redirect
2022-02-12 16:53:11
prion
prion
Open redirect
2022-02-14 12:15:00
nvd
nvd
CVE-2021-25033
2022-02-14 12:15:15
cve
cve
CVE-2021-25033
2022-02-14 12:15:15
cvelist
cvelist
CVE-2021-25033 Noptin < 1.6.5 - Open Redirect
2022-02-14 09:20:45