WordPress Plugin Vulnerabilities

Share This Image < 1.99 - Open Redirect

Description

The plugin is vulnerable to Open Redirect due to insufficient validation on a redirect url supplied. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.

Affects Plugins

Plugin icon
share-this-image
Fixed in 1.99

References

CVE
CVE-2024-33930
URL
https://patchstack.com/database/vulnerability/share-this-image/wordpress-share-this-image-plugin-1-97-open-redirection-vulnerability

Classification

Type
REDIRECT
OWASP top 10
A1: Injection
CWE
CWE-601
CVSS
4.3 (medium)

Miscellaneous

Original Researcher
stealthcopter
Verified
No
WPVDB ID
6c0167bc-d2e1-4a7a-a018-df1de6cb6f1f

Timeline

Publicly Published
2024-04-29 (about 2 years ago)
Added
2024-05-07 (about 2 years ago)
Last Updated
2024-05-24 (about 2 years ago)

Other

Published
Title
Published
2025-12-15
Title
Directorist < 8.6.7 - Unauthenticated Open Redirect
Published
2024-01-03
Title
WordPress Toolbar <= 2.2.6 - Open Redirect
Published
2015-07-05
Title
StageShow <= 5.0.8 - Open Redirect
Published
2025-01-24
Title
KB Support < 1.6.8 - Unauthenticated Open Redirect
Published
2025-11-29
Title
Flexmls® IDX < 3.15.8 - Unauthenticated Open Redirect