Unrated severityNVD Advisory· Published Sep 30, 2026

CVE-2026-88791

Description

The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination when a wildcard redirect rule to an absolute URL is configured, allowing unauthenticated attackers to redirect visitors to an arbitrary external website via a crafted request path.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Safe Redirect Managerllm-create
Range: <2.3.0

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/a8aa5685-e36e-4e1f-a259-fab3910ee550/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000