Skip to content
Not rated

CVE-2021-25111 The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url…

Description

The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url before redirecting users o it, leading to an open redirect issue

Affected products and versions

Product Affected versions Fixed in
English WordPress Admin 1.5 earliest → < 1.5.2 1.5.2
Track this CVE