CVE-2021-25111

Publication date

2022-04-25 15:50:47

Family

WPScan

State

PUBLISHED

Description

The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url before redirecting users o it, leading to an open redirect issue