Description

wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirect_to parameter.

Remediation

References

CVE-2007-1599

Related Vulnerabilities

WordPress Plugin Visual Website Collaboration, Feedback & Project Management-Atarim Cross-Site Scripting (3.30)

Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-5301)

Ruby on Rails Inefficient Regular Expression Complexity Vulnerability (CVE-2024-26142)

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-3454)

Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2025-62409)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2007-1599