CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
What the vulnerability does
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in KaizenCoders Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress update-urls allows Phishing.This issue affects Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress: from n/a through <= 1.4.3.
Explanation of Vulnerability in Simple Terms
The Update URLs plugin for WordPress contains an open redirect vulnerability in versions up to 1.4.3. An attacker can craft a malicious link that redirects users to an external website when clicked. The vulnerability requires user interaction—a site visitor must click the attacker's link. While the redirect itself doesn't directly compromise the site, it can be used in phishing attacks to steal credentials or distribute malware.
What an attacker can do
Redirect site visitors to a malicious external website via a crafted link.
Potential impact on your site
Your site could be used to phish visitors or distribute malware if attackers craft redirect links pointing to your site.
Conditions required to exploit
No authentication required. The victim must click an attacker-supplied link.
Key dates
External resources
