CVE-2021-25111

MEDIUM 6.1CVE-2021-25111 · Published 25/04/2022 · updated 17/06/2026

In short

CVE-2021-25111 is a MEDIUM (CVSS 6.1) vulnerability affecting english wordpress admin (english wordpress admin project).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.9% of all vulnerabilities.
Fix: update to 1.5.2 or later.

Package	Affected versions	Patched versions
english wordpress admin english_wordpress_admin_project	`< 1.5.2`	`1.5.2`

Description

The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url before redirecting users o it, leading to an open redirect issue

References

wpscan.com/vulnerability/af548fab-96c2-4129-b609-e24aad0b1fc4 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free