Unrated severityNVD Advisory· Published Sep 11, 2019· Updated Aug 21, 2024

CVE-2019-16220

Description

In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php could lead to an open redirect if a provided URL path does not start with a forward slash.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/WordPressdescription
WordPress/WordPressllm-fuzzy
Range: <5.2.3
Package: https://wordpress.org/plugins/wordpress

Patches

Vulnerability mechanics

References

www.debian.org/security/2020/dsa-4599mitrevendor-advisory
www.debian.org/security/2020/dsa-4677mitrevendor-advisory
lists.debian.org/debian-lts-announce/2019/10/msg00023.htmlmitremailing-list
seclists.org/bugtraq/2020/Jan/8mitremailing-list
core.trac.wordpress.org/changeset/45971mitre
github.com/WordPress/WordPress/commit/c86ee39ff4c1a79b93c967eb88522f5c09614a28mitre
wordpress.org/news/2019/09/wordpress-5-2-3-security-and-maintenance-release/mitre
wpvulndb.com/vulnerabilities/9863mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000