Description
The Conditional CAPTCHA WordPress plugin through 4.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Conditional CAPTCHA | ≤ 4.0.0 | — |
References
- https://wpscan.com/vulnerability/5a275725-85f2-4463-880b-9473dbdfa8e0/ exploit vdb-entry technical-description