WordPress Toolbar <= 2.2.6 - Open Redirect
33Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 6.1epss 26%
exploitation probability
26%top 2% of all CVEs
observed exploitation
nono source reports it
The WordPress Toolbar WordPress plugin through 2.2.6 redirects to any URL via the "wptbto" parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
Unknown · WordPress Toolbar