CVE-2023-5610

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p30

Published

Nov 20, 2023 (Nov 20, 2023)

Modified

Jun 17, 2026

Description

The Seraphinite Accelerator WordPress plugin before 2.2.29 does not validate the URL to redirect any authenticated user to, leading to an arbitrary redirect

Vendors: s-sols
Products: seraphinite accelerator
Ecosystems: WordPress
Weakness: CWE-601
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.