CVE-2021-25111: vulnerability in English WordPress Admin
English WordPress Admin < 1.5.2 - Unauthenticated Open Redirect
Published · Updated
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 1.9%
exploitation probability
1.9%top 21% of all CVEs
observed exploitation
nono source reports it
The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url before redirecting users o it, leading to an open redirect issue
Affected products
Unknown · English WordPress Admin