WordPress 297

To plugin page Claim VDP

WordPress <= 1.0 is vulnerable to Open Redirection

Resolve by 21 April, 2007 Low priority

6.1

Medium severity CVSS 3.1 score

Prevent exploits against this and future vulnerabilities!

Protect now

Patchstack Professional users are protected since 09.12.2022

Enable Protection

Solution

Update to fix

Update the WordPress to the latest available version (at least 1.1).

An unknown person discovered and reported this Open Redirection vulnerability in WordPress. This could allow a malicious actor to redirect users from one site to the other due to the redirect URL not being validated. Users could be tricked to visiting a legitimate site to then be redirected to a malicious site and cause a phishing incident. This vulnerability has been fixed in version 1.1.

Have additional information or questions about this entry? Get in touch.

Other vulnerabilities in this WordPress core

1 present

296 fixed

View all