Skip to content
OpenAdvisories
Medium · 4.7 Scanner template CVE-2025-68509 EUVD-2025-205206GHSA-3wm8-ph73-r7q9

WordPress User Submitted Posts plugin <= 20251121 - Open Redirection vulnerability

Published Dec 24, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Jeff Starr User Submitted Posts user-submitted-posts allows Phishing.This issue affects User Submitted Posts: from n/a through <= 20251121.

Affected products

VendorProductAffectedFixed
Jeff Starr User Submitted Posts ≤ 20251121 —

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References