Description
The Wp Edit Password Protected WordPress plugin before 1.3.5 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Wp Edit Password Protected | < 1.3.5 | 1.3.5 |
References
- https://wpscan.com/vulnerability/3cf79a0b-2731-47f8-a397-995f4de7067e/ exploit vdb-entry technical-description