PT-2025-21488 · WordPress · Wccp-Pro

·

CVE-2024-6690

·

Published

2025-05-15

·

Updated

2025-10-27

CVSS v3.1

6.1

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: wccp-pro WordPress plugin versions prior to 15.3
Description: The issue concerns an open-redirect flaw via the referrer parameter, allowing the redirection of users to external sites.
Recommendations: For versions prior to 15.3, update to version 15.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the referrer parameter to minimize the risk of exploitation.

Exploit

Fix

Open Redirect

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-6690

Affected Products

Wccp-Pro