Open Redirect Vulnerability in Galaxy Weblinks WP Clone Plugin

CVE-2025-31871

What is CVE-2025-31871?

The Galaxy Weblinks WP Clone plugin contains an Open Redirect vulnerability that allows unauthenticated attackers to manipulate URL redirect behavior, potentially leading users to untrusted sites. This flaw makes it easy for malicious actors to conduct phishing attacks by misleading users into entering sensitive information on counterfeit websites. The issue is present in all versions up to 3.4 of WP Clone any post type. Organizations using this plugin should take steps to mitigate this risk and ensure user safety.

References