vulnerability
WordPress Plugin: newsletter-optin-box: CVE-2021-25033: URL Redirection to Untrusted Site ('Open Redirect')
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:M/Au:N/C:P/I:P/A:N) | Jan 17, 2022 | May 15, 2025 | May 15, 2025 |
Severity
6
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:N)
Published
Jan 17, 2022
Added
May 15, 2025
Modified
May 15, 2025
Description
The WordPress Newsletter Plugin WordPress plugin before 1.6.5 does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue.
Solution
newsletter-optin-box-plugin-cve-2021-25033
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.