CVE-2026-88791 — Safe Redirect Manager < 2.3.0 - Open Redirect via Wildcard Redirect Rules

CVE-2026-88791

Safe Redirect Manager < 2.3.0 - Open Redirect via Wildcard Redirect Rules PUBLISHED

Description (CNA)

The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination when a wildcard redirect rule to an absolute URL is configured, allowing unauthenticated attackers to redirect visitors to an arbitrary external website via a crafted request path.

Affected (CNA)

Vendor / product	Versions
Unknown / Safe Redirect Manager	affected 0 before 2.3.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/a8aa5685-e36e-4e1f-a259-fab3910ee550/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.