The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url before redirecting users o it, leading to an open redirect issue

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-25111