CVE-2026-24545

MediumCVSS 4.3

Published: 25/05/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

Missing authorization in the QR Redirector plugin allows exploiting incorrectly configured access control security levels. This vulnerability affects versions from n/a through 2.0.3.

Risk Assessment

An attacker can redirect users to malicious sites or gain unauthorized access to plugin settings.

Recommendation

Update the QR Redirector plugin to the latest available version.

Other vulnerabilities in QR Redirector

CVE-2026-105069Medium
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikki Blight QR Redirector qr-redirector allows Stored XSS. This issue affects QR Redirector from n/a through 2.0.5.

Original NVD description (English source)

Missing Authorization vulnerability in Nikki Blight QR Redirector allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects QR Redirector: from n/a through 2.0.3.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS