CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
What the vulnerability does
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in PluginOps Landing Page Builder – Lead Page – Optin Page – Squeeze Page – WordPress Landing Pages.This issue affects Landing Page Builder – Lead Page – Optin Page – Squeeze Page – WordPress Landing Pages: from n/a through 1.5.1.5.
Explanation of Vulnerability in Simple Terms
The Landing Page Builder plugin for WordPress contains an open redirect vulnerability that allows an attacker to redirect users to an external website. The vulnerability requires user interaction—the victim must click a malicious link. While the attacker cannot steal data directly, they can use this to redirect users to phishing sites or malware distribution pages, potentially compromising site visitors.
What an attacker can do
Redirect site visitors to an external website of the attacker's choice via a crafted link.
Potential impact on your site
Site visitors could be redirected to phishing or malware sites, damaging your site's reputation and exposing users to harm.
Conditions required to exploit
No authentication required. The victim must click a malicious link containing the redirect payload.
Key dates
External resources
Related vulnerabilities
