BaseFortify

Publication date: 2025-11-24

Last updated on: 2025-11-25

Assigner: WPScan

Description

The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-24

Last Modified

2025-11-25

Generated

2026-07-06

AI Q&A

2025-11-24

EPSS Evaluated

2026-07-05

NVD

CVE-2025-12569

EUVD

EUVD-2025-198620

Affected Vendors & Products

Vendor	Product	Version / Range
wordpress	wp_front_user_submit	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Guest posting / Frontend Posting / Front Editor WordPress plugin before version 5.0.0 occurs because the plugin does not validate a parameter before redirecting the user to its value. This leads to an Open Redirect issue, where an attacker can redirect users to arbitrary external websites.

Impact Analysis

The Open Redirect vulnerability can be exploited by attackers to redirect users to malicious websites, potentially leading to phishing attacks, malware distribution, or loss of user trust in the affected website.

Hi! I’m here to help you understand CVE-2025-12569. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70