CVE-2023-6389

MEDIUM NUCLEI

WordPress Toolbar <2.2.6 - Open Redirect

Title source: llm

Description

The WordPress Toolbar WordPress plugin through 2.2.6 redirects to any URL via the "wptbto" parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.

Exploits (1)

github WORKING POC 4 stars

by halilkirazkaya · poc

https://github.com/halilkirazkaya/cve-poc-garage/tree/main/2023/CVE-2023-6389.md

View Code ZIP pw:eip

Nuclei Templates (1)

WordPress Toolbar <= 2.2.6 - Open Redirect

MEDIUMVERIFIEDby s4e-io

Shodan: http.html:/wp-content/plugins/wordpress-toolbar/

FOFA: body=/wp-content/plugins/wordpress-toolbar/

References (2)

[Exploit] https://magos-securitas.com/txt/CVE-2023-6389.txt

[Exploit, Third Party Advisory] https://wpscan.com/vulnerability/04dafc55-3a8d-4dd2-96da-7a8b100e5a81/

Scores

CVSS v3 6.1

EPSS 0.5252

EPSS Percentile 97.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-601

Status published

Products (1)

abhinavsingh/wordpress_toolbar < 2.2.6

Published Jan 29, 2024

Tracked Since Feb 18, 2026