Aller au contenu
Se connecter
4.7 Moyenne

CVE-2026-1277 The URL Shortify plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.12.1 due to…

Description

The URL Shortify plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.12.1 due to insufficient validation on the 'redirect_to' parameter in the promotional dismissal handler. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites via a crafted link.

Produits et versions touchés

Produit Versions touchées Corrigé en
URL Shortify – Simple and Easy URL Shortener 1.12 premières → 1.12.1 Pas de correctif indiqué

Autres CVE de URL Shortify – Simple and Easy URL Shortener

Les 3 CVE de URL Shortify – Simple and Easy URL Shortener →
CVE-2024-13362 Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in… 6.1 Moyenne CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Moyenne
Suivre cette CVE