Open Redirect Vulnerabilities in WordPress Products
CVE-2019-16220

6.1MEDIUM

Key Information:

Vendor

Wordpress
Status
WordPress
Vendor
CVE Published:
11 September 2019

What is CVE-2019-16220?

In earlier versions of WordPress, specifically prior to 5.2.3, a flaw in the function wp_validate_redirect was identified. This vulnerability lacks proper validation and sanitization of URLs, allowing attackers to redirect users to arbitrary URLs if the provided path does not start with a forward slash. This poses a risk for phishing and other malicious activities, emphasizing the importance for site administrators to update their WordPress installations to mitigate this risk. Regular updates and security hygiene are critical in protecting against such vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://wpvulndb.com/vulnerabilities/9863
https://wordpress.org/news/2019/09/wordpress-5-2-3-securi...
https://core.trac.wordpress.org/changeset/45971

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.