WordPress Plugin Vulnerabilities

WPtouch < 3.7 - Unvalidated Open Redirect

Description

The WPtouch WordPress plugin was affected by an Unvalidated Open Redirect security vulnerability.

Proof of Concept

Affects Plugins

Plugin icon
wptouch
Fixed in 3.7

References

Classification

Type
REDIRECT
OWASP top 10
A1: Injection
CWE
CWE-601

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
c07d7717-941c-4952-b4d8-2a54a3eeb95f

Timeline

Publicly Published
2015-01-29 (about 11 years ago)
Added
2015-03-09 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2021-10-21
Title
Pie Register < 3.7.2.4 - Open Redirect
Published
2025-04-09
Title
WebinarPress <= 1.33.27 - Open Redirect
Published
2017-09-20
Title
WordPress 2.9.2-4.8.1 - Open Redirect
Published
2023-10-06
Title
affiliate-toolkit – WordPress Affiliate Plugin < 3.4.0 - Open Redirect via atkpout.php
Published
2019-06-01
Title
Paid Memberships Pro <= 2.0.5 - Authenticated Open Redirect