Payment Gateway for Telcell WordPress Plugin Open Redirect Vulnerability

An open redirect vulnerability has been identified in the Payment Gateway for Telcell WordPress plugin, affecting versions through 2.0.1. The issue arises because the plugin does not properly validate the 'api_url' parameter before redirecting users, allowing for unauthorized redirection to arbitrary URLs.

Impact

Exploitation of this vulnerability allows for open redirection, where users can be sent to a malicious site without their knowledge.

Remediation

Users can update to Payment Gateway for Telcell WordPress plugin version 2.0.4 or later to address this vulnerability.