Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions, ccf0f6ba56aabac1f34459b98c761db0e9d6cc23

CVE, Research URL: ccf0f6ba56aabac1f34459b98c761db0e9d6cc23
Home page URL: Security reports for Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Application: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Published on: Jun 01, 2019
Research Description: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions [paid-memberships-pro] < 2.0.6 (closed) Paid Memberships Pro <= 2.0.5 - Open Redirect The Paid Memberships Pro plugin for WordPress is vulnerable to an open redirect vulnerability in versions up to, and including, 2.0.5. This is due to missing redirect location verification on the pmpro_redirect_to_logged_in() function. This makes it possible for authenticated attackers to redirect traffic to a different website, where they could potentially perform other attacks; such as phishing.
Affected versions: max 2.0.6.
Status: vulnerable

Paid Memberships Pro &#8211; Content Restriction, User Registration, &amp; Paid Subscriptions, ccf0f6ba56aabac1f34459b98c761db0e9d6cc23