CVE-2021-25033CWE-601

Noptin < 1.6.5 - Open Redirect

published February 14, 2022

CVSS
—
EPSS
2%
Percentile
83.2
In the wild
Unconfirmed
What it is

The WordPress Newsletter Plugin WordPress plugin before 1.6.5 does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02303 · 83.2th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2022-02-14T09:20Z
EPSS history
Timeline
  • 14 FEB 09:20Z
    Noptin < 1.6.5 - Open Redirect
    cvelistv5