Lucene search
Erwan LR (WPScan)WPVDB-ID:E880A9FB-B089-4F98-9781-7D946F22777EHistoryOct 27, 2023 - 12:00 a.m.
Seraphinite Accelerator < 2.2.29 - Authenticated Arbitrary Redirect
2023-10-2700:00:00
Erwan LR (WPScan)
wpscan.com
5
plugin
arbitrary redirect
authenticated user
url validation
Description The plugin does not validate the URL to redirect any authenticated user to, leading to an arbitrary redirect
PoC
Make a logged in user open https://example.com/wp-admin/admin-ajax.php?action=seraph_accel_act&fn;=acceptEula&redir;=https%3A%2F%2Fwpscan.com
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 2.2.29 |
Related
cve
cve
CVE-2023-5610
2023-11-20 19:15:09
cvelist
cvelist
wpexploit
wpexploit
Seraphinite Accelerator < 2.2.29 - Authenticated Arbitrary Redirect
2023-10-27 00:00:00
prion
prion
Design/Logic Flaw
2023-11-20 19:15:00
nvd
nvd
CVE-2023-5610
2023-11-20 19:15:09
wordfence
wordfence
5.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.0%
Related for WPVDB-ID:E880A9FB-B089-4F98-9781-7D946F22777E