CVE-2023-6389

6.1 mediumEPSS 27%

Medium (6.1) in abhinavsingh wordpress toolbar. EPSS 27% chance of exploitation in the next 30 days.

The WordPress Toolbar WordPress plugin through 2.2.6 redirects to any URL via the "wptbto" parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 27% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-601
Published: 2024-01-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

abhinavsingh:wordpress_toolbar

References

https://magos-securitas.com/txt/CVE-2023-6389.txt
https://wpscan.com/vulnerability/04dafc55-3a8d-4dd2-96da-7a8b100e5a81/
https://magos-securitas.com/txt/CVE-2023-6389.txt
https://wpscan.com/vulnerability/04dafc55-3a8d-4dd2-96da-7a8b100e5a81/

Check your stack JSON