What is CVE-2025-3433?

CVE-2025-3433 is a medium-severity vulnerability in Smartdevth Advanced Advertising System, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 6.1/10. Published 2025-04-08.

How severe is CVE-2025-3433?

Medium severity. CVSS v3 base score is 6.1 out of 10.

Open Redirect in Smartdevth Advanced Advertising System

CVE-2025-3433

The Advanced Advertising System plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.3.1. This is due to insufficient validation on the redirect url supplied via the 'redir' parameter. This makes it p…

Vulnerability class: Open Redirect

EPSS: 0.002 (10.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Smartdevth Advanced Advertising System — versions 0

Weakness classification (CWE)

CWE-601 — URL Redirection to Untrusted Site (Open Redirect)

References

Frequently asked questions

What is CVE-2025-3433?: CVE-2025-3433 is a medium-severity vulnerability in Smartdevth Advanced Advertising System, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 6.1/10. Published 2025-04-08.
How severe is CVE-2025-3433?: Medium severity. CVSS v3 base score is 6.1 out of 10.