{"id":"CVE-2025-5983","aliases":["EUVD-2025-35355","GHSA-9x3m-44rv-9cpf"],"status":"published","title":"Meta Tag Manager \u003c 3.3 - Contributor+ Open Redirect","description":"The Meta Tag Manager WordPress plugin before 3.3 does not restrict which roles can create http-equiv refresh meta tags.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00266,"percentile":0.1867,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2025-10-22T06:00:06Z","modified":"2026-10-08T11:10:00Z","products":[{"vendor":"unknown","product":"meta tag manager"}],"references":[{"url":"https://wpscan.com/vulnerability/4a2d4dcf-bb34-4eec-b5de-31c6a4d823cf/","tags":["exploit","vdb-entry","technical-description"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5983"},{"url":"https://wpscan.com/vulnerability/4a2d4dcf-bb34-4eec-b5de-31c6a4d823cf"},{"url":"https://github.com/advisories/GHSA-9x3m-44rv-9cpf"}],"sources":{"cve":[{"id":"CVE-2025-5983","title":"Meta Tag Manager \u003c 3.3 - Contributor+ Open Redirect","description":"The Meta Tag Manager WordPress plugin before 3.3 does not restrict which roles can create http-equiv refresh meta tags.","status":"published","published":"2025-10-22T06:00:06.022Z","modified":"2025-10-22T15:45:29.932Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:32:30.302289Z"}],"euvd":[{"id":"EUVD-2025-35355","description":"The Meta Tag Manager WordPress plugin before 3.3 does not restrict which roles can create http-equiv refresh meta tags.","status":"published","published":"2025-10-22T06:00:06Z","modified":"2025-10-22T15:45:29Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T19:49:38.726368Z"}],"ghsa":[{"id":"GHSA-9x3m-44rv-9cpf","title":"The Meta Tag Manager WordPress plugin before 3.3 does not restrict which roles can create http...","description":"The Meta Tag Manager WordPress plugin before 3.3 does not restrict which roles can create http-equiv refresh meta tags.","status":"published","published":"2025-10-22T06:31:11Z","modified":"2025-10-22T18:31:40Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:04:11.563124Z"}],"nvd":[{"id":"CVE-2025-5983","description":"The Meta Tag Manager WordPress plugin before 3.3 does not restrict which roles can create http-equiv refresh meta tags.","status":"published","published":"2025-10-22T06:15:32.39Z","modified":"2026-10-08T11:10:00.25Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"updated_at":"2026-11-02T14:11:39.069866Z"}]}}