Description

WordPress Plugin Ad-Manager is prone to an open redirect vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue may allow attackers to redirect users to arbitrary web sites and conduct phishing attacks; other attacks are also possible. WordPress Plugin Ad-Manager version 1.1.2 is vulnerable; prior versions may also be affected.

Remediation

Edit the source code to ensure that input is properly verified or disable the plugin until a fix is available

References

http://tetraph.com/security/open-redirect/cve-2014-8754-wordpress-ad-manager-plugin-dest-redirect-privilege-escalation/

http://packetstormsecurity.com/files/129290/WordPress-Ad-Manager-1.1.2-Open-Redirect.html

http://seclists.org/fulldisclosure/2014/Nov/93

Related Vulnerabilities

WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.9.63)

Microsoft IIS5 NTLM and Basic authentication bypass

WordPress Plugin BackWPup Cross-Site Scripting (3.0.12)

WordPress Plugin WordPress Landing Pages Unspecified Vulnerability (1.8.1)

WordPress Plugin Emag Marketplace Connector Cross-Site Scripting (1.0.0)

Severity

High

Classification

CVE-2014-8754 CWE-601 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N

Tags

Missing Update Url Redirection