Vulnerabilities and Security Researches

Simple Newsletter Plugin – Noptin, CVE-2021-25033

CVE, Research URL: CVE-2021-25033
Home page URL: Security reports for Simple Newsletter Plugin – Noptin
Application: Simple Newsletter Plugin – Noptin
Published on: Feb 14, 2022
Research Description: The WordPress Newsletter Plugin WordPress plugin before 1.6.5 does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue
Affected versions: max 1.6.5.
Status: vulnerable