low3.4
CVE-2026-88791
The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination when a wildcard redirect rule to an absolute URL is…
Impact
The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination when a wildcard redirect rule to an absolute URL is configured, allowing unauthenticated attackers to redirect visitors to an arbitrary external website via a crafted request path.
Affected products
| Product | Affected versions |
|---|---|
| Safe Redirect Manager WordPress Plugin | before 2.3.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.