CyberRota Analysis
AI-GeneratedThe Safe Redirect Manager plugin for WordPress versions prior to 2.3.0 is vulnerable due to improper validation of redirect destinations when using wildcard rules for absolute URLs. This flaw enables unauthenticated attackers to redirect users to arbitrary external sites, potentially leading to phishing or other malicious activities. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of exploitation.
Original NVD Description
The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination when a wildcard redirect rule to an absolute URL is configured, allowing unauthenticated attackers to redirect visitors to an arbitrary external website via a crafted request path.