CVE-2021-25033

PoC —

CVSS 3.1

6.1 medium

EPSS

2%p82

Published

Feb 14, 2022 (Feb 14, 2022)

Modified

Jun 17, 2026

Description

The WordPress Newsletter Plugin WordPress plugin before 1.6.5 does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue

Vendors: noptin
Products: noptin
Ecosystems: WordPress
Weakness: CWE-601
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news0 stories

No ingested article mentions this CVE yet.