Lucene search
Omar AminWPVDB-ID:832C6155-A413-4641-849C-B98BA55E8551HistoryFeb 06, 2023 - 12:00 a.m.
Pie Register < 3.8.2.3 - Open Redirect
2023-02-0600:00:00
Omar Amin
wpscan.com
7
pie register
plugin
open redirect
vulnerability
redirection
log in
log out
browser
poc
security
0.001 Low
EPSS
Percentile
39.5%
The plugin does not properly validate the redirection URL when logging in and login out, leading to an Open Redirect vulnerability
PoC
Log In: 1. Visit /login?redirect_to=//example.com 2. Log in as a user with lower privileges than Administrator. 3. See that the browser is redirected to example.com Log Out: 1. When logged in to the site, visit /wp-admin?piereg_logout_url=true&redirect;_to=//example.com 2. See that the browser is redirected to example.com
| CPE | Name | Operator | Version |
|---|---|---|---|
| pie-register | lt | 3.8.2.3 |
Related
nuclei
nuclei
WordPress Pie Register <3.8.2.3 - Open Redirect
2023-03-31 11:28:24
nvd
nvd
CVE-2023-0552
2023-02-27 16:15:12
wpexploit
wpexploit
Pie Register < 3.8.2.3 - Open Redirect
2023-02-06 00:00:00
cve
cve
CVE-2023-0552
2023-02-27 16:15:12
prion
prion
Open redirect
2023-02-27 16:15:00
cvelist
cvelist
CVE-2023-0552 Pie Register < 3.8.2.3 - Open Redirect
2023-02-27 15:24:31
wordfence
wordfence