Vulnerabilities > CVE-2021-25033 - Unspecified vulnerability in Noptin

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

noptin

NVD

Published: 2022-02-14

Updated: 2024-11-21

Summary

The WordPress Newsletter Plugin WordPress plugin before 1.6.5 does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue

Vulnerable Configurations

Part	Description	Count
Application	Noptin Noptin Noptin - Noptin Noptin 1.0.0 Noptin Noptin 1.0.1 Noptin Noptin 1.0.2 Noptin Noptin 1.0.3 Noptin Noptin 1.0.5 Noptin Noptin 1.0.9 Noptin Noptin 1.1.0 Noptin Noptin 1.1.1 Noptin Noptin 1.2.0 Noptin Noptin 1.2.1 Noptin Noptin 1.2.2 Noptin Noptin 1.2.3 Noptin Noptin 1.2.4 Noptin Noptin 1.2.5 Noptin Noptin 1.2.6 Noptin Noptin 1.2.7 Noptin Noptin 1.2.8 Noptin Noptin 1.2.9 Noptin Noptin 1.3.0 Noptin Noptin 1.3.1 Noptin Noptin 1.3.2 Noptin Noptin 1.3.3 Noptin Noptin 1.3.4 Noptin Noptin 1.3.5 Noptin Noptin 1.3.6 Noptin Noptin 1.3.7 Noptin Noptin 1.3.9 Noptin Noptin 1.4.0 Noptin Noptin 1.4.1 Noptin Noptin 1.4.2 Noptin Noptin 1.4.3 Noptin Noptin 1.4.4 Noptin Noptin 1.4.5 Noptin Noptin 1.5.0 Noptin Noptin 1.5.1 Noptin Noptin 1.5.2 Noptin Noptin 1.5.3 Noptin Noptin 1.5.4 Noptin Noptin 1.5.5 Noptin Noptin 1.5.6 Noptin Noptin 1.6.0 Noptin Noptin 1.6.1 Noptin Noptin 1.6.2 Noptin Noptin 1.6.3 Noptin Noptin 1.6.4	46

Summary

Vulnerable Configurations

References