CVE-2023-35883 - WordPress Core Web Vitals & PageSpeed Booster Plugin <= 1.0.12 is vulnerable to Open Redirection

Back Back to CVE browser

MEDIUM

WordPress Core Web Vitals & PageSpeed Booster Plugin <= 1.0.12 is vulnerable to Open Redirection

Published Dec 19, 2023

6.1

MEDIUM

CVSS 3.1

EPSS 0.48%

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Magazine3 Core Web Vitals & PageSpeed Booster.This issue affects Core Web Vitals & PageSpeed Booster: from n/a through 1.0.12.

Affected products

Vendor Magazine3 Product Core Web Vitals & PageSpeed Booster Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <=1.0.12

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Magazine3

Core Web Vitals & PageSpeed Booster

unaffected

Version	Status	Constraints
-	affected	<=1.0.12

Remediation

Vendor solution

Update to 1.0.13 or a higher version.

Weaknesses (1)

CWE-601

Open Redirect

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-39876
Advisory
https://patchstack.com/database/vulnerability/core-web-vitals-pagespeed-booster/wordpress-core-web-vitals-pagespeed-booster-plugin-1-0-12-open-redirection-vulnerability?_s_id=cve
vdb-entryThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-39876		Advisory
https://patchstack.com/database/vulnerability/core-web-vitals-pagespeed-booster/wordpress-core-web-vitals-pagespeed-booster-plugin-1-0-12-open-redirection-vulnerability?_s_id=cve		vdb-entryThird Party Advisory