WordPress StageShow Plugin <= 5.0.8 - Open redirect

This vulnerability is in stageshow_redirect.php in the “Redirect” function. It allows an attacker to redirect users to arbitrary web sites and conduct phishing attacks in the “url” parameter.

Solution

           Update the plugin.