CVE-2013-4339

WordPress before 3.6.1 does not properly validate URLs before use in an HTTP redirect, which allows remote attackers to bypass intended redirection restrictions via a crafted string.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

7.49% chance of exploitation in the next 30 days, 94th percentile

Nuclei

medium

Published

2013-09-12

Updated

2024-08-06

Nuclei templates (1)

• topscoder/nuclei-wordfence-cve/blob/main/nuclei-templates/2013/CVE-2013-4339-wordpress-45…

References

• CVE Record
• NVD entry

Related

• CVE-2013-4338
• CVE-2013-4340
• CVE-2013-4322
• CVE-2013-4341
• CVE-2013-4318
• CVE-2013-4348