The Clearfy Cache WordPress plugin before version 2.4.3 allows unauthenticated attackers to supply a redirect target that is not validated by the plugin. The Cyrlitera old‑URL redirect handler decodes the request URI and passes it to an insecure redirect function, enabling a redirect to any external site. This flaw is a classic URL Redirection to Untrusted Resource (CWE‑601) and can be exploited to trick visitors into phishing sites, drive‑by downloads, or other malicious actions, compromising user trust and potentially leading to credential theft or malware delivery.

All WordPress installations running the Clearfy Cache plugin with a version older than 2.4.3, when a non‑default option is enabled that activates the Cyrlitera redirect logic. The vulnerability exists regardless of user role and requires only that the attacker can direct a victim to a URL that triggers the redirect handler.

The vulnerability has no publicly reported exploitation data and is not listed in the CISA KEV catalog. The EPSS score of 0.00136 indicates a very low probability of exploitation, yet the flaw allows unauthenticated attackers to redirect visitors to any external URL via a standard HTTP request, making it moderate to high risk in environments where the affected plugin is active. The CVSS score of 4.7 reflects moderate severity, but attackers could use the redirect to facilitate phishing, drive‑by downloads, or other malicious campaigns, justifying proactive remediation.