CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
What the vulnerability does
In affected versions of WordPress, due to an issue in wp_validate_redirect() and URL sanitization, an arbitrary external link can be crafted leading to unintended/open redirect when clicked. This has been patched in version 5.4.2, along with all the previously affected versions via a minor release (5.3.4, 5.2.7, 5.1.6, 5.0.10, 4.9.15, 4.8.14, 4.7.18, 4.6.19, 4.5.22, 4.4.23, 4.3.24, 4.2.28, 4.1.31, 4.0.31, 3.9.32, 3.8.34, 3.7.34).
Explanation of Vulnerability in Simple Terms
WordPress 5.4.0 and 5.4.1 contain an open redirect vulnerability in the login flow. An authenticated user can craft a malicious redirect URL that causes the site to send other users to an external website after they log in. The attacker must trick a user into clicking a specially crafted login link. This can be used for phishing or credential theft.
What an attacker can do
Redirect users to a malicious external site after they log in to WordPress.
Potential impact on your site
Users logging in via attacker-controlled links may be redirected to phishing sites, risking credential theft or malware infection.
Conditions required to exploit
Attacker needs a low-privilege WordPress account and must trick a user into clicking a malicious login link.
Key dates
External resources
Related vulnerabilities
