The plugin does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue
https://example.com/?noptin_ns=email_click&to=https://wpscan.com
Trang LKB
Channchan
Yes
2022-01-17 (about 1 years ago)
2022-01-17 (about 1 years ago)
2022-04-12 (about 9 months ago)