WordPress Hide My WP Ghost Open Redirection Vulnerability

A URL redirection vulnerability allowing untrusted site redirects (open redirect) has been identified in the WordPress plugin Hide My WP Ghost, affecting versions prior to 7.0.00. This vulnerability could be exploited for phishing attacks by redirecting users to malicious sites.

Impact

Exploitation of this vulnerability could lead to phishing incidents, where users are tricked into visiting malicious sites under the guise of legitimacy.

Remediation

Users of the Hide My WP Ghost plugin should update to version 7.0.00 or later. Patchstack users can enable auto-update for vulnerable plugins.