CVE-2023-28786CWE-601

WordPress Solid Security Plugin <= 8.1.4 is vulnerable to Open Redirection

Low · published December 29, 2023

CVSS v3.1
3.7
EPSS
0%
Percentile
27.7
In the wild
Unconfirmed
What it is

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SolidWP Solid Security – Password, Two Factor Authentication, and Brute Force Protection.This issue affects Solid Security – Password, Two Factor Authentication, and Brute Force Protection: from n/a through 8.1.4.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00353 · 27.7th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2023-12-29T09:46Z
EPSS history
Timeline
  • 29 DEC 09:46Z
    WordPress Solid Security Plugin <= 8.1.4 is vulnerable to Open Redirection
    cvelistv5