CVE-2026-16296
Received Received - Intake

Clearfy Cache Plugin Unsafe Redirect to External URL

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: WPScan

Description
The Clearfy Cache WordPress plugin before 2.4.3 does not validate the redirect target in its Cyrlitera old-URL redirect handler, passing a decoded request URI to an unsafe redirect function, which allows unauthenticated attackers to redirect visitors to an arbitrary external URL when a non-default option is enabled.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-04
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-16296
EUVD
EUVD-2026-52598

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
clearfy cache to 2.4.3 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The Clearfy Cache WordPress plugin before version 2.4.3 has a flaw in its Cyrlitera old-URL redirect handler. It does not properly validate redirect targets, allowing unauthenticated attackers to redirect visitors to arbitrary external URLs when a specific non-default option is enabled.

Impact Analysis

This vulnerability could allow attackers to redirect your website visitors to malicious sites, potentially leading to phishing attacks, malware downloads, or other security risks for your users.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or other standards as it involves an unsafe redirect in a WordPress plugin. However, if exploited, it could lead to phishing attacks or unauthorized data exposure, which may indirectly impact compliance by compromising user trust or data integrity.

Mitigation Strategies

Update the Clearfy Cache WordPress plugin to version 2.4.3 or later to address the vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16296. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart