PT-2024-19330 · Unknown · Simple Membership

·

CVE-2024-22308

·

Published

2024-01-24

·

Updated

2024-01-30

CVSS v3.1

6.1

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Simple Membership versions through 4.4.1
Description The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability affects the Simple Membership plugin.
Recommendations For versions through 4.4.1, update to a version later than 4.4.1 to resolve the issue. As a temporary workaround, consider restricting access to the redirect functionality in the Simple Membership plugin until a patch is available. Avoid using untrusted URLs in the affected plugin to minimize the risk of exploitation.

Fix

Open Redirect

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-22308

Affected Products

Simple Membership