CVE-2021-25111

Summary

The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url before redirecting users o it, leading to an open redirect issue

Affected Software

VendorProductVersion RangeStatus
UnknownEnglish WordPress Admin1.5.2 < 1.5.2affected

Weaknesses

  • CWE-601: CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

ADP Enrichment

CVE Program Container

Additional References

References