https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T09:46:08.340203+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24838 CVE-2021-24838 — AnyComment < 0.3.5 - Open Redirect 2026-10-15T09:46:08.356659+00:00

Affected: Unknown AnyComment

The AnyComment WordPress plugin before 0.3.5 has an API endpoint which passes user input via the redirect parameter to the wp_redirect() function without being validated first, leading to an Open Redirect issue, which according to the vendor, is a feature.