Pie Register < 3.8.2.3 - Open Redirect

2023-02-0600:00:00

Omar Amin

pie register

vulnerability

open redirect

logout

administrator

EPSS

0.001

Percentile

31.0%

JSON

The plugin does not properly validate the redirection URL when logging in and login out, leading to an Open Redirect vulnerability

Log In:

1. Visit `/login?redirect_to=//example.com`
2. Log in as a user with lower privileges than Administrator.
3. See that the browser is redirected to `example.com`

Log Out:

1. When logged in to the site, visit `/wp-admin?piereg_logout_url=true&redirect_to=//example.com`
2. See that the browser is redirected to `example.com`

EPSS

0.001

Percentile

31.0%

JSON

Related for WPEX-ID:832C6155-A413-4641-849C-B98BA55E8551