CVE-2023-35883: WordPress Core Web Vitals & PageSpeed Booster Plugin <= 1.0.12 is vulnerable to Open Redirection
Published Dec 19, 2023
·Updated
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Magazine3 Core Web Vitals & PageSpeed Booster.This issue affects Core Web Vitals & PageSpeed Booster: from n/a through 1.0.12.
Affected Software
1 affected component
Magazine3 Core Web Vitals \& Pagespeed Booster Wordpress<=1.0.12
Remediation
Information
Update to 1.0.13 or a higher version.
Event History
Dec 19, 2023
CVE Published
via MITRE·08:11 PM
Data Sourced
via MITRE·08:11 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-35883?
CVE-2023-35883 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2023-35883?
To fix CVE-2023-35883, update the Magazine3 Core Web Vitals & PageSpeed Booster plugin to version 1.0.13 or later.
3
What type of vulnerability is CVE-2023-35883?
CVE-2023-35883 is identified as an Open Redirect vulnerability, which can lead to users being redirected to untrusted sites.
4
Which versions of the software are affected by CVE-2023-35883?
CVE-2023-35883 affects Magazine3 Core Web Vitals & PageSpeed Booster versions up to and including 1.0.12.
5
What impact does CVE-2023-35883 have on users?
CVE-2023-35883 can potentially expose users to phishing attacks by redirecting them to harmful third-party sites.