Approved changes feed: RSS · Atom

cpe:2.3:a:kiboit:phastpress:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorKiboit (36fad957-0508-510d-bd57-b48f489828fe)
ProductPhastpress (c8f9341d-dc6b-5a84-8e7e-3a7d65687722)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24210 vulnerable 2026-06-08 05:30:03.963731 PhastPress < 1.111 - Open Redirect
There is an open redirect in the PhastPress WordPress plugin before 1.111 that allows an attacker to malform a request to a page with the plugin and then redirect the victim to a malicious page. There is also a support comment from another user one year ago (https://wordpress.org/support/topic/phast-php-used-for-remote-fetch/) that says that the php involved in the request only go to whitelisted pages but it's possible to redirect the victim to any domain.
Published: 2021-04-05T18:27:47.000Z
Updated: 2024-08-03T19:21:18.865Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.