CVE-2021-24210

Name of the Vulnerable Software and Affected Versions: PhastPress WordPress plugin versions prior to 1.111

Description: The issue is related to an open redirect that allows an attacker to malform a request to a page with the plugin and then redirect the victim to a malicious page. A support comment indicates that although the PHP involved in the request is supposed to only go to whitelisted pages, it is possible to redirect the victim to any domain.

Recommendations: For versions prior to 1.111, update to version 1.111 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's functionality to minimize the risk of exploitation.