CVE-2022-27861: 
WordPress vulnerability analysis and mitigation

The vulnerability (CVE-2022-27861) affects the Arscode Ninja Popups WordPress plugin versions 4.7.5 and earlier. This is an Unauthenticated Open Redirect vulnerability that allows attackers to redirect users to potentially malicious sites. The vulnerability was discovered and disclosed in July 2023 (Patchstack).

The vulnerability is classified as an Open Redirect (CWE-601) with a CVSS v3.1 base score of 4.7 (Medium). The issue stems from improper validation of redirect URLs in the plugin, which could allow unauthenticated attackers to perform malicious redirects (WPScan).

A successful exploitation of this vulnerability could allow malicious actors to redirect users from legitimate sites to malicious ones, potentially leading to phishing incidents. The vulnerability requires user interaction as victims need to click on a specially crafted link (Patchstack).

The vulnerability was fixed in version 4.7.8 of the Ninja Popups plugin. Users are advised to update to this version or later to remove the vulnerability. The security issue is considered to have a low severity impact and is unlikely to be exploited (Patchstack).