Themify Builder WordPress plugin before 7.5.8 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue
https://github.com/Chocapikk/My-CVEs
https://wpscan.com/vulnerability/d130a60c-c36b-4994-9b0e-e52cd7f99387/