CVE-2023-0552

The Registration Forms WordPress plugin before 3.8.2.3 does not properly validate the redirection URL when logging in and login out, leading to an Open Redirect vulnerability

CVSS v3.1

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v3.1

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

24.26% chance of exploitation in the next 30 days, 98th percentile

Nuclei

medium · CWE-601

Published

2023-02-27

Updated

2025-03-18

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/832c6155-a413-4641-849c-b98ba55e8551

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0552.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2023-0551
• CVE-2023-0559
• CVE-2023-0549
• CVE-2023-0560
• CVE-2023-0548
• CVE-2023-0561