plugin

English Wp Admin Vulnerabilities

2 known security issues reported for the English Wp Admin WordPress plugin. Most recent disclosed Apr 25, 2022.

1 high

Running English Wp Admin on your site? Check whether your installed version is affected.

Scan your site free

English WordPress Admin [english-wp-admin] < 1.5.2 (closed)

unknown

[en] The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url before redirecting users o it, leading to an open redirect issue

Affected:
up to 1.5.2
Fixed in:
1.5.2
Disclosed:
Apr 25, 2022

CVE-2021-25111 on NVD →

English WordPress Admin <= 1.5.1.1 - Unauthenticated Open Redirect

high

The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url before redirecting users to it, leading to an open redirect issue

CVSS:
7.2
Affected:
up to 1.5.1.1
Fixed in:
1.5.2
Disclosed:
Apr 8, 2022

CVE-2021-25111 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database