title: English WordPress Admin < 1.5.2 - Unauthenticated Open Redirect
description: The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url before redirecting users o it, leading to an open redirect issue
problem types: CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
affected:
{
product: English WordPress Admin
vendor: Unknown
versions:
lessThan: 1.5.2, status: affected, version: 1.5.2, versionType: custom
}