6.1

CVE-2023-6389

Exploit

WordPress Toolbar <= 2.2.6 - Open Redirect

WordPress Toolbar Plugin <= 2.2.6 - Open Redirect via wptbto

The WordPress Toolbar WordPress plugin through 2.2.6 redirects to any URL via the "wptbto" parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.
Mögliche Gegenmaßnahme
WordPress Toolbar: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Abhinavsingh ≫ Wordpress Toolbar HwPlatformwordpress Version <= 2.2.6
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt WordPress Toolbar
Version *-2.2.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 25.68% 0.977
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

https://magos-securitas.com/txt/CVE-2023-6389.txt
Exploit
https://wpscan.com/vulnerability/04dafc55-3a8d-4dd2-96da-7a8b100e5a81/
Third Party Advisory
Exploit
https://www.wordfence.com/threat-intel/vulnerabilities/id/e88a45e5-f882-419e-b0b0-612912666693
Third Party Advisory