CVE-2015-10112

Name of the Vulnerable Software and Affected Versions WooFramework Branding Plugin versions up to 1.0.1

Description A problematic vulnerability has been found in the WooFramework Branding Plugin on WordPress. The issue affects the admin screen logic function of the file wooframework-branding.php. The manipulation of the url argument leads to an open redirect. This attack can be launched remotely.

Recommendations For WooFramework Branding Plugin versions up to 1.0.1, upgrade to version 1.0.2 to address this issue. As a temporary workaround, consider restricting the manipulation of the url argument in the admin screen logic function until the upgrade is applied.