WordPress Plugin Vulnerabilities

Password Protected 1.4 - Login Process redirect_to Parameter Arbitrary Site Redirect

Description

The Password Protected WordPress plugin was affected by a Login Process redirect_to Parameter Arbitrary Site Redirect security vulnerability.

Affects Plugins

Plugin icon
password-protected
Fixed in 1.5

Classification

Type
REDIRECT
OWASP top 10
A1: Injection
CWE
CWE-601

Miscellaneous

Verified
No
WPVDB ID
8a4e4b4e-7a7a-412e-a831-ae4c6de7b9fa

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-11-27 (about 10 years ago)

Other

Published
Title
Published
2022-10-17
Title
WP < 6.0.3 - Open Redirect via wp_nonce_ays
Published
2026-01-31
Title
Conditional CAPTCHA <= 4.0.0 - Open Redirect
Published
2026-04-13
Title
User Registration & Membership < 5.1.5 - Unauthenticated Open Redirect via 'redirect_to_on_logout' Parameter
Published
2014-08-01
Title
WordPress 3.0 - 3.6 Crafted String URL Redirect Restriction Bypass
Published
2023-11-14
Title
Integration for Contact Form 7 and Constant Contact < 1.1.5 - Open Redirect