Cross-Site Scripting/Cross-Site Request Forgery in Peter's Login Redirect WordPress Plugin - Security Advisories and Insights - Securify B.V.
A Cross-Site Scripting vulnerability was found in the Peter's Login Redirect WordPress Plugin. This issue allows an attacker to perform a wide variety of actions, such as stealing Administrators' session tokens, or performing arbitrary actions on their behalf. In addition the Plugin is vulnerable to Cross-Site Request Forgery, which allows an attacker to change any setting of this plugin. In order to exploit this issue, the attacker has to lure/force a logged on WordPress Administrator into opening a malicious website.
This issue was successfully tested on Peter's Login Redirect WordPress Plugin version 2.9.0.
This issue is resolved in Peter's Login Redirect version 2.9.1.
The Peter's Login Redirect WordPress Plugin redirect users to different locations after logging in and logging out. A Cross-Site Scripting vulnerability was found in the Peter's Login Redirect WordPress Plugin. This issue allows an attacker to perform a wide variety of actions, such as stealing Administrators' session tokens, or performing arbitrary actions on their behalf. In addition the Plugin is vulnerable to Cross-Site Request Forgery, which allows an attacker to change any setting of this plugin.
This issue exists because Peter's Login Redirect lacks protection against Cross-Site Request Forgery attacks. In addition, the plugin lacks proper output encoding, rendering it vulnerable to Cross-Site Scripting. See for example the following code fragment.