CVE-2025-12569
Medium · 4.7CVSS
4.7
EPSS
0.2%
Published
Nov 24, 2025
CISA due date
—
The record
The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|