Description (CNA)
The WordPress Newsletter Plugin WordPress plugin before 1.6.5 does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / WordPress Newsletter Plugin – Noptin | affected 1.6.5 before 1.6.5 |
CWE
CWE-601
References
- https://wpscan.com/vulnerability/c2d2384c-41b9-4aaf-b918-c1cfda58af5c
- https://plugins.trac.wordpress.org/changeset/2639592
ADP enrichment
No English description supplied.