The Payment Gateway for Telcell WordPress plugin through 2.0.1 does not validate the api_url parameter before redirecting the user to its value, leading to an Open Redirect issue
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/f3e64947-3138-4ec4-86c4-27b5d6a5c9c2/ | Exploit Third Party Advisory |
Configurations
History
01 Aug 2025, 01:56
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:hkdigit:payment_gateway_for_telcell:*:*:*:*:*:wordpress:*:* | |
| First Time |
Hkdigit
Hkdigit payment Gateway For Telcell |
11 Jun 2025, 19:11
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-601 | |
| CPE | cpe:2.3:a:hkdigitalagency:payment_gateway_for_telcell:*:*:*:*:*:wordpress:*:* | |
| First Time |
Hkdigitalagency payment Gateway For Telcell
Hkdigitalagency |
|
| References | () https://wpscan.com/vulnerability/f3e64947-3138-4ec4-86c4-27b5d6a5c9c2/ - Exploit, Third Party Advisory |
15 May 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-15 20:15
Updated : 2025-08-01 01:56
NVD link : CVE-2023-6786
Mitre link : CVE-2023-6786
JSON object : View
Products Affected
hkdigit
- payment_gateway_for_telcell
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')