CVE-2023-0552: Pie Register < 3.8.2.3 - Open Redirect
Modified
Published 27-02-2023Last modified 18-03-2025
Vulnerability summary
CVE-2023-0552 is a medium (CVSS 6.1) Open Redirect vulnerability in genetechsolutions pie_register. EPSS estimates a 24.26% chance of exploitation in the next 30 days, higher than 97.8% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
6.1/10
010
Medium · v3.1 (wordfence)EPSS score
24.26%
0%100%
High · 0.00 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits1reference
Timeline
- 27-02-2023PublishedVulnerability first disclosed.
- 18-03-2025Last modifiedVulnerability information updated.
Description
The Registration Forms WordPress plugin before 3.8.2.3 does not properly validate the redirection URL when logging in and login out, leading to an Open Redirect vulnerability
CVSS metrics
3 scores · 3 sources · 1 versionMedium 6.1Preferred score · wordfence (Source)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NSources3 sources · 5.4–6.1
- CVE.orgCNA5.4MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NDiffers
- NVDNIST5.4MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NDiffers
EPSS trend
Probability
24.26%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
No change 0.00 pp
From 24.26% on 27-09-2026
27-09-202627-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (wpscan.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Genetechsolutions1 product
- pie_register< 3.8.2.3
Unknown1 product
- registration forms≥ 3.8.1.4, < 3.8.2.3
Wordpress1 product
- pie-register≤ 3.8.2.2 (fixed in 3.8.2.3)
3 vendors · 3 products
References
2 links- wpscan.com/vulnerability/832c6155-a413-4641-849c-b98ba55e8551ExploitVDB EntryTechnical DescriptionThird Party Advisory