Improper Validation in Safe Redirect Manager Plugin for WordPress
CVE-2026-88791
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 30 September 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-88791?
The Safe Redirect Manager plugin for WordPress prior to version 2.3.0 is susceptible to improper validation of redirect destinations. This vulnerability allows unauthenticated attackers to manipulate redirect rules, potentially redirecting users to malicious external websites when specific wildcard redirect rules to absolute URLs are set up. As a result, visitors may unknowingly engage with harmful content, leading to phishing attempts or malware infections.
Affected Version(s)
Safe Redirect Manager 0 < 2.3.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.