The vulnerability identified as CVE-2026-25392 affects the KaizenCoders WordPress plugin 'Update URLs – Quick and Easy way to search old links and replace them with new links' in versions up to 1.4.3. It is an Open Redirect flaw where the plugin improperly handles URL redirection, allowing attackers to redirect users to untrusted external sites. This can be exploited for phishing attacks by tricking users into visiting malicious websites. The CVSS v3.1 base score is 4.7 (medium), with attack vector network, low attack complexity, no privileges required, user interaction required, scope changed, and limited confidentiality impact. There is no known exploit in the wild and no patch or official fix information provided.

The primary impact is the potential for phishing attacks due to the open redirect vulnerability. Attackers can craft URLs that appear to be legitimate but redirect users to malicious sites. There is no direct impact on system integrity or availability. Confidentiality impact is limited to potential user credential or information theft via phishing. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when clicking on URLs generated or handled by this plugin. Monitoring for updates from KaizenCoders is recommended to apply any forthcoming patches promptly.