CVE-2025-48092: WordPress Fix Multiple Redirects plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Q: What does an attacker need to exploit this issue?

The vulnerability is remotely reachable with low attack complexity and requires no attacker privileges. Exploitation does require user interaction, meaning a victim must be induced to access attacker-controlled content or a crafted request.

Q: Which plugin versions are affected?

Fix Multiple Redirects versions through 1.2.3 are affected. The available data does not identify a fixed version.

Q: What impact can successful exploitation have?

The CVSS vector indicates low confidentiality, integrity, and availability impact, with scope changed. As a reflected XSS issue, successful exploitation can cause attacker-supplied script to execute in the victim's browser context.

Published Oct 22, 2025

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jurajpuchky Fix Multiple Redirects fix-multiple-redirects allows Reflected XSS.This issue affects Fix Multiple Redirects: from n/a through <= 1.2.3.

Affected Software

1 affected component

WordPress Fix Multiple Redirects<=1.2.3

Event History

Oct 22, 2025

CVE Published

via MITRE·02:32 PM

Data Sourced

via MITRE·02:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The vulnerability is remotely reachable with low attack complexity and requires no attacker privileges. Exploitation does require user interaction, meaning a victim must be induced to access attacker-controlled content or a crafted request.

Which plugin versions are affected?

Fix Multiple Redirects versions through 1.2.3 are affected. The available data does not identify a fixed version.

What impact can successful exploitation have?

The CVSS vector indicates low confidentiality, integrity, and availability impact, with scope changed. As a reflected XSS issue, successful exploitation can cause attacker-supplied script to execute in the victim's browser context.

CVE-2025-48092: WordPress Fix Multiple Redirects plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which plugin versions are affected?

What impact can successful exploitation have?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which plugin versions are affected?

What impact can successful exploitation have?