How it was found

Steps To Reproduce:

1_ visit : Normal Link. 2_ Sign-in with your wordpress account and you will directed to This 3_Change the value of the Parameter : redirect_to .. To the attacker website let's say : (https://vul-example.com) 4_NOTE THAT : you must URL-encode the vulnerable link first

Impact

Phishing attacks to get Users to visit malicious sites without realizing it.