PT-2026-21418

CVE-2026-1369

Published

2026-01-31

Updated

2026-02-22

Description by

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Conditional CAPTCHA WordPress plugin versions through 4.0.0

Description The software does not properly validate a parameter before redirecting a user, which can lead to an Open Redirect issue. The redirect url parameter is susceptible to manipulation, allowing an attacker to redirect users to a malicious website.

Recommendations Versions prior to 4.0.0 should be updated.

Exploitability

Exploit

Fix

Impacts

Researchers

Bob Matyas

Vendors

Affected products

Weakness enumeration

CWE-601: URL Redirection to Untrusted Site (\'Open Redirect\')

Related identifiers