Shreyas Malhotra

Name of the Vulnerable Software and Affected Versions: elink – Embed Content plugin for WordPress versions up to and including 1.1.0 Description: The elink – Embed Content plugin for WordPress is susceptible to malicious redirection due to insufficient restriction of URLs supplied through the elink shortcode. Authenticated attackers with Contributor-level access or higher can leverage this to redirect users to a malicious domain by supplying an HTML file. Recommendations: Update the elink – Embed Content plugin to a version newer than 1.1.0.