PT-2025-51075 · WordPress · Solutions Ad Manager

Ivan Cese · CVE-2025-14451 · Published 2025-12-13 · Updated 2025-12-13

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Solutions Ad Manager plugin for WordPress versions prior to 1.0.1

Description The software is susceptible to an Open Redirect issue because of inadequate validation of the redirect URL provided through the sam-redirect-to parameter. This allows unauthenticated attackers to redirect users to potentially harmful websites if they can trick users into taking a specific action.

Recommendations Update the Solutions Ad Manager plugin to version 1.0.1 or later.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-14451

Affected Products

Solutions Ad Manager

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-14451 · Security Note
• https://plugins.trac.wordpress.org/browser/solutions-ad-manager/trunk/public/class-solutions-ad-manager-public.php#L30 · Note
• https://plugins.trac.wordpress.org/browser/solutions-ad-manager/tags/1.0.0/public/class-solutions-ad-manager-public.php#L30 · Note
• https://twitter.com/CVEnew/status/1999865360246526248 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/696495c5-c8f8-4790-af89-1ee911767b1b?source=cve · Note