Description
In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php could lead to an open redirect if a provided URL path does not start with a forward slash.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2018-2677 Vulnerability (CVE-2018-2677)
Liferay Portal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2024-25609)
Magento Improper Input Validation Vulnerability (CVE-2022-42344)
WordPress Plugin Google Analytics MU Cross-Site Request Forgery (2.3.1)
WordPress Plugin Easy Social Box/Page Cross-Site Scripting (4.1.2)