wordpress.org/openverse/: unauthenticated open redirect — `str_replace()`'s 4th arg is a count, not a limit; bypasses WordPress.org SSO allow-list
HackerOneWordPress2026-10-30
Web
Medium
BUG BOUNTY WRITEUPS
Open redirect writeups
Open redirects on their own are low impact. These writeups show when they matter, usually as a step to steal OAuth tokens.
36 reports and writeups from 2024 to 2026. 23 carry a severity from the disclosing platform, 6 of them rated High or Critical. Last updated 2026-10-30.
Latest Open redirect reports
Search and filter all writeupsMastering Open Redirect Vulnerabilities: From Simple Bypasses to Critical Bug Bounties
Medium2026-10-30
Web
Not rated
Web
Not rated
Unauthenticated go-httpbin servers : Leads to Cookie Tossing on *.aws.dev and Open Redirect
HackerOneAWS VDP2026-10-16
Web, Cloud
Medium
Open redirect on app.hey.com bypasses HEY desktop's internal-origin allowlist and loads attacker content inside a HEY BrowserWindow
HackerOneBasecamp2026-10-15
Web
Medium
OAuth redirect uri validation bypass for :proxima_first_party_sync apps
HackerOneGitHub2026-07-21
Web
High
1-Click Account Takeover via Open Redirect through Regex Bypass in Domain Validation
HackerOneKhan Academy2026-06-20
Web
Critical
page.line.me Open Redirect Leading to OAuth Authorization Code Exposure and Access Token Compromise
HackerOneLY Corporation2026-06-02$1,000 bounty
Web
High
Incomplete fix for CVE-2022-35406: meta-redirect content-type check bypassable via parameter injection
HackerOnePortSwigger Web Security2026-06-02
Web
High
Liberapay member team twitter account broken Link Hijacking via Expired Twitter Account Link
HackerOneLiberapay2026-05-09
Web
Not rated
another liberapay member team twitter account broken Link Hijacking via Expired Twitter Account Link
HackerOneLiberapay2026-05-09
Web
Not rated
Open Redirect in Rocket.Chat
HackerOneRocket.Chat2026-04-10
Web
Medium
Bypass of Open Redirect Fix on lovable.dev via /..// Path Traversal in redirect parameter
HackerOneLovable VDP2026-03-12
Web
Medium
Open Redirect on lovable.dev via redirect parameter leads to phishing attacks
HackerOneLovable VDP2026-03-05
Web
Not rated
CVE‑2025‑4123 — Grafana Open Redirect → Stored XSS → SSRF (Full Read) at ██████
HackerOneU.S. Dept Of Defense2026-01-12
Web
High
Authentication Token Theft via Open Redirect in Callback URL Parameter
HackerOnelemlist2025-11-14
Web
Critical
REDIRECTION VULNERABILITY/HOST HEADER INJECTION VULNERABILITY
HackerOneHiro2025-10-31
Web
Medium
Open Redirect Vulnerability in OAuth Flow Leading to Potential Phishing Attack
HackerOneLichess2025-05-15
Web
Low
Open Redirect on ███████
HackerOneFastly VDP2025-05-02
Web
Low
Open redirect
HackerOneXVIDEOS2025-02-06
Web
Not rated
Open Redirection effects autodiscover.rockstargames.com
HackerOneRockstar Games2025-02-03
Web
Low
open redirected by host header
HackerOneLocalize2024-12-02
Web
Not rated
Open redirect Via X-Forwarded-Host
HackerOneOmise2024-11-17
Web
Low
Open redirect when logging in with user_oidc
HackerOneNextcloud2024-11-15
Web, Cloud
Not rated
Open redirect via redirect_to parameter in tumblr.com
HackerOneAutomattic2024-11-05
Web
Low
$1600 Bounty on a Main Domain
Medium2024-08-18$1,600 bounty
Web
Not rated
█████████ (Android): Vulnerable to Javascript Injection and Open redirect
HackerOneU.S. Dept Of Defense2024-07-26
Android
Medium
Event create can create attachments that link to other websites
HackerOneNextcloud2024-07-14$250 bounty
Web, Cloud
Medium
Story of a 1000$ Open Redirect
InfoSec Write-ups2024-07-01$1,000 bounty
Web
Not rated
Account takeover using reset password link
HackerOneMars2024-06-25
Web
Medium
Looking for vulnerabilities in Strapi (CVE-2024-34065)
Researcher blogStrapi2024-06-25
Web, Source Code
Not rated
ExpressionEngine, Version 7.3.15
Researcher blogPacket Tide (ExpressionEngine)2024-06-17
Web
Not rated
NCIIPC VDP Bug : Open Redirection Vulnerability In Govt. Site !!
MediumNCIIPC2024-05-09
Web
Not rated
Open Redirect via Non-Latin Subdomain in vcc-*.8x8.com/AGUI/█.php
HackerOne8x82024-03-20$100 bounty
Web
Low
Multiple Open Redirect on TikTok domains
HackerOneTikTok2024-02-16
Web
Low
Open redirect in user_saml via RelayState parameter
HackerOneNextcloud2024-01-18
Web, Cloud
Low
Every entry links to the original report or article. Secure Hyperloop doesn't copy the content. Severity comes from the disclosing platform (HackerOne). Writeups without a platform rating show "Not rated". The index has 2,810 items in total.