CVE-2023-0552
Pie Register < 3.8.2.3 - Open Redirect
Vexday Risk Score
33Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
CVSS 5.4EPSS 24.3%KEV nãoPoC —Nuclei simMetasploit —Patch —
Lifecycle
27 Feb 2023Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
The Registration Forms WordPress plugin before 3.8.2.3 does not properly validate the redirection URL when logging in and login out, leading to an Open Redirect vulnerability
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected products
Unknown · Registration FormsWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →