CVE-2018-17074

Description

The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://wordpress.org/plugins/wordpress-feed-statistics/#developers ↗
• https://hackerone.com/reports/22142 ↗
• https://plugins.trac.wordpress.org/browser/wordpress-feed-statistics/trunk/feed-statistics.php?rev=960868 ↗
• https://wpvulndb.com/vulnerabilities/7543 ↗