Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-25033

Noptin < 1.6.5 - Open Redirect

Description

The WordPress Newsletter Plugin WordPress plugin before 1.6.5 does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WordPress Newsletter Plugin – Noptin

  • 1.6.5 to < 1.6.5affected

References