Description (CNA)
The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.10 did not validate a redirect parameter on a specifically crafted URL before redirecting the user to it, leading to an Open Redirect issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / The Plus Addons for Elementor Page Builder | affected 4.1.10 before 4.1.10 |
CWE
CWE-601
References
- https://theplusaddons.com/changelog/
- https://wpscan.com/vulnerability/fd4352ad-dae0-4404-94d1-11083cb1f44d
ADP enrichment
No English description supplied.