Vendor
CVE-2026-1277 is an unauthenticated open redirect vulnerability in the URL Shortify WordPress plugin that allows attackers to redirect users to malicious websites via a crafted redirect_to parameter.