title: Frontend Post WordPress Plugin <= 2.8.4 - Contributor+ Arbitrary Redirect
description: The Frontend Post WordPress Plugin WordPress plugin through 2.8.4 does not validate an attribute of one of its shortcode, which could allow users with a role as low as contributor to add a malicious shortcode to a page/post, which will redirect users to an arbitrary domain.
problem types: CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
affected:
{
vendor: Unknown
product: Frontend Post WordPress Plugin
versions:
status: affected, versionType: custom, version: 0, lessThanOrEqual: 2.8.4
defaultStatus: affected
collectionURL: https://wordpress.org/plugins
}