CVE-2023-6786

The Payment Gateway for Telcell WordPress plugin through 2.0.1 does not validate the api_url parameter before redirecting the user to its value, leading to an Open Redirect issue

Score

CVSS 3.1 6.1 Medium

Status

Analyzed - contact@wpscan.com

Published

2025-05-15

Last modified

2025-05-17

Weaknesses

CWE-601

Affected products

• Payment Gateway For Telcell (Hkdigit)
• Payment Gateway For Telcell (Unknown)

References

• https://wpscan.com/vulnerability/f3e64947-3138-4ec4-86c4-27b5d6a5c9c2/