PT-2024-12650 · WordPress · T1 Wordpress Theme

Vflexo + 1 · Published 2024-01-16 · Updated 2024-01-30 · CVE-2023-3771

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions T1 WordPress theme versions through 19.0

Description The issue allows for unauthenticated open redirect, enabling any attacker to redirect users to arbitrary websites.

Recommendations For T1 WordPress theme versions through 19.0, update to a version later than 19.0 to resolve the issue.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2023-3771

Affected Products

T1 Wordpress Theme

References · 5

• 🔥 https://wpscan.com/vulnerability/7c6fc499-de09-4874-ab96-bdc24d550cfb · Exploit
• https://osv.dev/vulnerability/CVE-2023-3771 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3771 · Security Note
• https://t.me/cvenotify/69204 · Telegram Post
• https://twitter.com/CVEnew/status/1747293158302740729 · Twitter Post