Unauthenticated Open Redirect Vulnerability in Export WP Page to Static HTML/CSS Plugin
CVE-2024-3597
7.1HIGH
Key Information:
- Vendor
Wordpress
- Vendor
- CVE Published:
- 20 June 2024
What is CVE-2024-3597?
The Export WP Page to Static HTML/CSS plugin for WordPress has a vulnerability where it fails to properly validate redirect URLs supplied via the rc_exported_zip_file parameter. This weakness allows unauthenticated attackers to perform open redirects, potentially leading users to malicious websites. This issue persists in all plugin versions up to and including 2.2.2, making users vulnerable if they are lured into executing specific actions designed to exploit this flaw.
Affected Version(s)
Export WP Page to Static HTML/CSS * <= 2.2.2