Open Redirect Vulnerability in Age Verification Plugin for WordPress
CVE-2012-6499

Currently unrated

Key Information:

Vendor

Wordpress
Status
Age Verification
Vendor
CVE Published:
12 January 2013

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 46%

What is CVE-2012-6499?

The Age Verification plugin for WordPress is susceptible to an open redirect vulnerability, specifically in its age-verification.php file. This flaw enables remote attackers to craft malicious URLs that could redirect unsuspecting users to arbitrary websites. By exploiting the redirect_to parameter, attackers can leverage this vulnerability to perform phishing attacks, compromising the integrity of the affected site and endangering user data.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2012-6499 - Proof of Concept

References

http://www.securityfocus.com/bid/51357
vdb-entryx_refsource_BID
http://www.exploit-db.com/exploits/18350
exploitx_refsource_EXPLOIT-DB
http://www.osvdb.org/82584
vdb-entryx_refsource_OSVDB

EPSS Score

46% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

.