CVE-2023-32101 MEDIUM

CVE-2023-32101: WordPress Library Viewer Plugin <= 2.0.6 is vulnerable to Open Redirection

Vendor Pexle Chris
Product Library Viewer
Weakness CWE-601 · Open redirect
Published December 29, 2023
Last update April 28, 2026
View on NVD All CVEs

CVSS base score

4.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

What the vulnerability does

01Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Pexle Chris Library Viewer.This issue affects Library Viewer: from n/a through 2.0.6.

Explanation of Vulnerability in Simple Terms

02Summary

Library Viewer versions up to 2.0.6 contain an open redirect vulnerability. An attacker can craft a malicious link that redirects users to an external website after they interact with the application. The vulnerability requires user interaction and affects the scope beyond the vulnerable component. Low confidentiality impact is possible.

What an attacker can do

03Attacker Capabilities

Redirect users to a malicious external website via a crafted link.

Potential impact on your site

04Site Impact

Users may be redirected to phishing or malware sites if they click attacker-controlled links.

Conditions required to exploit

05Prerequisites

User must click a malicious link or visit a page containing the redirect.

Key dates

06Disclosure timeline

December 29, 2023 CVE published
April 28, 2026 Record updated