WordPress Plugin Vulnerabilities

Freshdesk Support < 1.8 - Open Redirect

Description

The plugin does not validate an URL before redirecting the user to, leading to an open redirect issue

Affects Plugins

Plugin icon
freshdesk-support
Fixed in 1.8

References

CVE
CVE-2015-10102

Classification

Type
REDIRECT
OWASP top 10
A1: Injection
CWE
CWE-601
CVSS
4.3 (medium)

Miscellaneous

Verified
No
WPVDB ID
4e666a85-7bb7-4f8a-9663-43bbb5c2f699

Timeline

Publicly Published
2015-06-05 (about 10 years ago)
Added
2023-04-18 (about 3 years ago)
Last Updated
2023-04-18 (about 3 years ago)

Other

Published
Title
Published
2025-06-05
Title
Newspack Newsletters < 3.14.0 - Open Redirect
Published
2026-02-17
Title
URL Shortify < 1.12.2 - Unauthenticated Open Redirect via 'redirect_to' Parameter
Published
2025-08-21
Title
Wp Edit Password Protected < 1.3.5 - Open Redirect
Published
2021-08-25
Title
Nested Pages < 3.1.16 - Open Redirect
Published
2024-04-05
Title
App Builder < 3.8.8 - Open Redirection