The Conditional CAPTCHA WordPress plugin through 4.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issueCreditsBob MatyasWPScanReferenceshttps://wpscan.com/vulnerability/5a275725-85f2-4463-880b-9473dbdfa8e0/
