← WordPress Vulnerabilities
WordPress security by component

Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress

Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Feb 19, 2026; the highest CVE/CNA score is 4.7.

Plugin slug: update-urls

CVE-2026-25392: Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress: An open redirect

Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress is affected by an open redirect. Exposure depends on how the affected operation is made reachable by the site. A crafted link can redirect visitors from the trusted site to an attacker-controlled destination.

PublishedFeb 19, 2026
Safe version guidanceSee mitigation notes
Safe version
Feb 19, 2026 CVE-2026-25392
Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress: An open redirect
Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress is affected by an open redirect. Exposure depends on how the affected operation is made reachable by the site. A crafted link can redirect visitors from the trusted site to an attacker-controlled destination.
See mitigation notes
CVE4.7
NVDPending