URL Redirection to Untrusted Site (Open Redirect)
The knock-knock plugin for Craft CMS suffers from an open redirect flaw.
Advisories for Composer/Verbb/Knock-Knock package
2020
Incorrect Comparison
The knock-knock plugin for Craft CMS may allow a user who injects a specially crafted X-Forwarded-For HTTP header to bypass IP restrictions.