CVE-2026-16296
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
The Clearfy Cache WordPress plugin before 2.4.3 does not validate the redirect target in its Cyrlitera old-URL redirect handler, passing a decoded request URI to an unsafe redirect function. This allows unauthenticated attackers to redirect visitors to an arbitrary external URL when a non-default option is enabled.
Risk Assessment
The risk is that users can be redirected to malicious sites, potentially leading to phishing, data theft, or malware installation.
Recommendation
Immediately update the Clearfy Cache plugin to version 2.4.3 or later, and verify that the redirect-related option is disabled if not required.
Other vulnerabilities in Clearfy Cache
See all- CVE-2026-16295Medium
The Clearfy Cache WordPress plugin before 2.4.3 does not perform a capability check in one of its admin-page dispatch paths, allowing any authenticated user such as a Subscriber to render admin-only settings pages and disclose their contents, including administrative nonces, while the canonical page URL correctly restricts access.
- CVE-2026-16297Medium
The 'Clearfy Cache' WordPress plugin before version 2.4.3 does not restrict the classes allowed when unserializing settings-import data, allowing users with administrator access to perform PHP Object Injection attacks, which may lead to remote code execution when a suitable gadget chain is present in the environment.
Original NVD description (English source)
The Clearfy Cache WordPress plugin before 2.4.3 does not validate the redirect target in its Cyrlitera old-URL redirect handler, passing a decoded request URI to an unsafe redirect function, which allows unauthenticated attackers to redirect visitors to an arbitrary external URL when a non-default option is enabled.