CVE-2021-25111CWE-601

English WordPress Admin < 1.5.2 - Unauthenticated Open Redirect

published April 25, 2022

CVSS
—
EPSS
2%
Percentile
79.6
In the wild
Unconfirmed
What it is

The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url before redirecting users o it, leading to an open redirect issue

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01908 · 79.6th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2022-04-25T15:50Z
EPSS history
Timeline
  • 25 APR 15:50Z
    English WordPress Admin < 1.5.2 - Unauthenticated Open Redirect
    cvelistv5