CVE-2023-6389
WordPress Toolbar <= 2.2.6 - Open Redirect
- State
- Published
- Severity
- 6.1 Medium
- Published
- Jan 29, 2024
- Updated
- Jun 20, 2025
- Reserved
- Nov 29, 2023
Description
The WordPress Toolbar WordPress plugin through 2.2.6 redirects to any URL via the "wptbto" parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.1 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | CISA-ADP |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
WordPress ToolbarUnknown |
|
References
- https://wpscan.com/vulnerability/04dafc55-3a8d-4dd2-96da-7a8b100e5a81/exploitvdb-entrytechnical-description
- https://magos-securitas.com/txt/CVE-2023-6389.txt
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.