Aller au contenu
Non notée

CVE-2021-25033 The WordPress Newsletter Plugin WordPress plugin before 1.6.5 does not validate the to parameter before redirecting…

Description

The WordPress Newsletter Plugin WordPress plugin before 1.6.5 does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue

Produits et versions touchés

Produit Versions touchées Corrigé en
WordPress Newsletter Plugin – Noptin 1.6 premières → < 1.6.5 1.6.5
Suivre cette CVE