CVE-2019-16220

score

<0.1

cvss

6.1

epss

2.5%

published

2019-09-11

kev added

—

first seen

2026-10-21

WordPress before 5.2.3 contains an open redirect caused by insufficient validation and sanitization of URLs in wp_validate_redirect in wp-includes/pluggable.php, letting attackers redirect users to malicious sites, exploit requires attacker to craft a malicious URL.