CVE-2023-6786: Payment Gateway for Telcell <= 2.0.1 - Unauthenticated Open Redirect
Published May 15, 2025
·Updated
The Payment Gateway for Telcell WordPress plugin through 2.0.1 does not validate the apiurl parameter before redirecting the user to its value, leading to an Open Redirect issue
Affected Software
2 affected components
Telcell Payment Gateway for Telcell<=2.0.1
Hkdigit Payment Gateway For Telcell Wordpress<2.0.4
Event History
May 15, 2025
CVE Published
via MITRE·08:09 PM
Data Sourced
via MITRE·08:09 PM
DescriptionWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-6786?
CVE-2023-6786 has been classified as a moderate severity vulnerability due to its potential for Open Redirect attacks.
2
How do I fix CVE-2023-6786?
To fix CVE-2023-6786, update the Telcell Payment Gateway for Telcell plugin to version 2.0.2 or later.
3
What is the impact of CVE-2023-6786?
The impact of CVE-2023-6786 allows attackers to redirect users to malicious websites through the api_url parameter.
4
What versions are affected by CVE-2023-6786?
CVE-2023-6786 affects versions of the Telcell Payment Gateway for Telcell plugin up to and including 2.0.1.
5
Is CVE-2023-6786 exploit remote?
Yes, CVE-2023-6786 can be exploited remotely by a malicious actor through crafted URLs.