Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbEnrico Marcolini, Claudio MarchesiniWPVDB-ID:F3E64947-3138-4EC4-86C4-27B5D6A5C9C2
HistoryFeb 27, 2024 - 12:00 a.m.

Payment Gateway for Telcell < 2.0.4 - Unauthenticated Open Redirect

2024-02-2700:00:00
Enrico Marcolini, Claudio Marchesini
wpscan.com
13
payment gateway
telcell
unauthenticated
open redirect
plugin
api_url
validation
redirect issue

AI Score

6.5

Confidence

High

JSON

Description The plugin does not validate the api_url parameter before redirecting the user to its value, leading to an Open Redirect issue

PoC

https://localhost/wp-admin/admin.php?page=wc-settings&amp;action;=redirect_telcell_form&amp;api;_url=https://www.google.com

Related

nuclei 1
wpexploit 1
nuclei
nuclei
Payment Gateway for Telcell < 2.0.4 - Open Redirect
2024-06-10 20:16:24
wpexploit
wpexploit
Payment Gateway for Telcell < 2.0.4 - Unauthenticated Open Redirect
2024-02-27 00:00:00

AI Score

6.5

Confidence

High

JSON
Related for WPVDB-ID:F3E64947-3138-4EC4-86C4-27B5D6A5C9C2
nuclei1wpexploit1