This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-16296 | BDVDB-2026-355041 Detail

Clearfy Cache

Description#

The Clearfy Cache WordPress plugin before 2.4.3 does not validate the redirect target in its Cyrlitera old-URL redirect handler, passing a decoded request URI to an unsafe redirect function, which allows unauthenticated attackers to redirect visitors to an arbitrary external URL when a non-default option is enabled.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact none, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.