WordPress Plugin Vulnerabilities

Noptin < 1.6.5 - Open Redirect

Description

The plugin does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue

Proof of Concept

Affects Plugins

Fixed in 1.6.5

References

Classification

Type
REDIRECT
OWASP top 10
CWE

Miscellaneous

Original Researcher
Trang LKB
Submitter
Channchan
Verified
Yes

Timeline

Publicly Published
2022-01-17 (about 3 years ago)
Added
2022-01-17 (about 3 years ago)
Last Updated
2022-04-12 (about 3 years ago)

Other