CVE-2021-24210 - Vulnerability Details - OpenCVE

Description

There is an open redirect in the PhastPress WordPress plugin before 1.111 that allows an attacker to malform a request to a page with the plugin and then redirect the victim to a malicious page. There is also a support comment from another user one year ago (https://wordpress.org/support/topic/phast-php-used-for-remote-fetch/) that says that the php involved in the request only go to whitelisted pages but it's possible to redirect the victim to any domain.

Published: 2021-04-05

Score: 6.1 Medium

EPSS: 3.1% Low

KEV: No

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Unknown

PhastPress

affected

Version	Status	Constraints
`1.111`	affected	< 1.111

Configuration 1 [-]

cpe:2.3:a:kiboit:phastpress:*:*:*:*:*:wordpress:*:*

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.03066.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://plugins.trac.wordpress.org/changeset/2497610/
https://wpscan.com/vulnerability/9b3c5412-8699-49e8-b60c-20d2085857fb

History

No history.

Subscriptions

Kiboit Phastpress

MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2021-04-05T18:27:47.000Z

Updated: 2024-08-03T19:21:18.865Z

Reserved: 2021-01-14T00:00:00.000Z

Link: CVE-2021-24210

Vulnrichment

No data.

NVD

Status : Modified

Published: 2021-04-05T19:15:17.467

Modified: 2026-06-17T03:39:36.400

Link: CVE-2021-24210

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-601
URL Redirection to Untrusted Site ('Open Redirect')

{"containers": {"cna": {"affected": [{"product": "PhastPress", "vendor": "Unknown", "versions": [{"lessThan": "1.111", "status": "affected", "version": "1.111", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Felipe Restrepo Rodriguez"}], "descriptions": [{"lang": "en", "value": "There is an open redirect in the PhastPress WordPress plugin before 1.111 that allows an attacker to malform a request to a page with the plugin and then redirect the victim to a malicious page. There is also a support comment from another user one year ago (https://wordpress.org/support/topic/phast-php-used-for-remote-fetch/) that says that the php involved in the request only go to whitelisted pages but it's possible to redirect the victim to any domain."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-601", "description": "CWE-601 URL Redirection to Untrusted Site ('Open Redirect')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-04-05T18:27:47.000Z", "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://wpscan.com/vulnerability/9b3c5412-8699-49e8-b60c-20d2085857fb"}, {"tags": ["x_refsource_MISC"], "url": "https://plugins.trac.wordpress.org/changeset/2497610/"}], "source": {"discovery": "UNKNOWN"}, "title": "PhastPress < 1.111 - Open Redirect", "x_generator": "WPScan CVE Generator", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "contact@wpscan.com", "ID": "CVE-2021-24210", "STATE": "PUBLIC", "TITLE": "PhastPress < 1.111 - Open Redirect"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "PhastPress", "version": {"version_data": [{"version_affected": "<", "version_name": "1.111", "version_value": "1.111"}]}}]}, "vendor_name": "Unknown"}]}}, "credit": [{"lang": "eng", "value": "Felipe Restrepo Rodriguez"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "There is an open redirect in the PhastPress WordPress plugin before 1.111 that allows an attacker to malform a request to a page with the plugin and then redirect the victim to a malicious page. There is also a support comment from another user one year ago (https://wordpress.org/support/topic/phast-php-used-for-remote-fetch/) that says that the php involved in the request only go to whitelisted pages but it's possible to redirect the victim to any domain."}]}, "generator": "WPScan CVE Generator", "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-601 URL Redirection to Untrusted Site ('Open Redirect')"}]}]}, "references": {"reference_data": [{"name": "https://wpscan.com/vulnerability/9b3c5412-8699-49e8-b60c-20d2085857fb", "refsource": "CONFIRM", "url": "https://wpscan.com/vulnerability/9b3c5412-8699-49e8-b60c-20d2085857fb"}, {"name": "https://plugins.trac.wordpress.org/changeset/2497610/", "refsource": "MISC", "url": "https://plugins.trac.wordpress.org/changeset/2497610/"}]}, "source": {"discovery": "UNKNOWN"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T19:21:18.865Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://wpscan.com/vulnerability/9b3c5412-8699-49e8-b60c-20d2085857fb"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://plugins.trac.wordpress.org/changeset/2497610/"}]}]}, "cveMetadata": {"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "assignerShortName": "WPScan", "cveId": "CVE-2021-24210", "datePublished": "2021-04-05T18:27:47.000Z", "dateReserved": "2021-01-14T00:00:00.000Z", "dateUpdated": "2024-08-03T19:21:18.865Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"product": "PhastPress", "vendor": "Unknown", "versions": [{"lessThan": "1.111", "status": "affected", "version": "1.111", "versionType": "custom"}]}], "source": "contact@wpscan.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:kiboit:phastpress:*:*:*:*:*:wordpress:*:*", "matchCriteriaId": "CB59F31A-0880-4A73-A6E9-BA8D131AAB58", "versionEndExcluding": "1.111", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "There is an open redirect in the PhastPress WordPress plugin before 1.111 that allows an attacker to malform a request to a page with the plugin and then redirect the victim to a malicious page. There is also a support comment from another user one year ago (https://wordpress.org/support/topic/phast-php-used-for-remote-fetch/) that says that the php involved in the request only go to whitelisted pages but it's possible to redirect the victim to any domain."}, {"lang": "es", "value": "Se presenta un redireccionamiento abierto en el plugin PhastPress WordPress versiones anteriores a 1.111, que permite a un atacante malformar una petici\u00f3n hacia una p\u00e1gina con el plugin y luego redireccionar a la v\u00edctima hacia una p\u00e1gina maliciosa. Tambi\u00e9n se presenta un comentario de soporte de otro usuario hace un a\u00f1o (https://wordpress.org/support/topic/phast-php-used-for-remote-fetch/) que dice que el php involucrado en la petici\u00f3n solo va a p\u00e1ginas incluidas en la lista blanca, pero es posible redireccionar a la v\u00edctima a cualquier dominio"}], "id": "CVE-2021-24210", "lastModified": "2026-06-17T03:39:36.400", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-04-05T19:15:17.467", "references": [{"source": "contact@wpscan.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://plugins.trac.wordpress.org/changeset/2497610/"}, {"source": "contact@wpscan.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://wpscan.com/vulnerability/9b3c5412-8699-49e8-b60c-20d2085857fb"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://plugins.trac.wordpress.org/changeset/2497610/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://wpscan.com/vulnerability/9b3c5412-8699-49e8-b60c-20d2085857fb"}], "sourceIdentifier": "contact@wpscan.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-601"}], "source": "contact@wpscan.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-601"}], "source": "nvd@nist.gov", "type": "Primary"}]}