CVE-2023-3771 - T1 theme <= 19.0 - Open Redirect

MEDIUM

T1 theme <= 19.0 - Open Redirect

Published Jan 16, 2024

6.1

MEDIUM

CVSS 3.1

EPSS 0.53%

The T1 WordPress theme through 19.0 is vulnerable to unauthenticated open redirect with which any attacker and redirect users to arbitrary websites.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	T1	affected	Affected ≥ 0, ≤ 19.0

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44404		Advisory
https://wpscan.com/vulnerability/7c6fc499-de09-4874-ab96-bdc24d550cfb/		exploitvdb-entrytechnical-descriptionThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner WPScan

Published Jan 16, 2024

Updated Jun 20, 2025

Reserved Jul 19, 2023

CISA Vulnrichment

Updated Jan 24, 2024

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner WPScan

Published Jan 16, 2024

Updated Jun 20, 2025

GitHub

No data