Description

Open redirect vulnerability in wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the backto parameter.

Remediation

References

CVE-2008-6762

Related Vulnerabilities

SharePoint CVE-2023-36764 Vulnerability (CVE-2023-36764)

WordPress Plugin Awesome Support-WordPress HelpDesk & Support Cross-Site Scripting (6.0.5)

WordPress Plugin Templatic Tevolution Arbitrary File Upload (2.3.6)

phpMyAdmin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-8959)

Craft CMS Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2022-29933)

Severity

Medium

Classification

CVE-2008-6762 CWE-59

Tags

Missing Update Known Vulnerabilities