Travelpayouts: All Travel Brands in One Place, CVE-2024-0337

CVE, Research URL: CVE-2024-0337
Home page URL: Security reports for Travelpayouts: All Travel Brands in One Place
Application: Travelpayouts: All Travel Brands in One Place
Published on: Mar 20, 2024
Research Description: The Travelpayouts: All Travel Brands in One Place WordPress plugin through 1.1.15 is vulnerable to Open Redirect due to insufficient validation on the travelpayouts_redirect variable. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.
Affected versions: max 1.1.14.
Status: vulnerable