Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin, bd5904e0ff07bbbdcd5d33770a948e713e56c451

CVE, Research URL: bd5904e0ff07bbbdcd5d33770a948e713e56c451
Home page URL: Security reports for Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Application: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Published on: Jul 23, 2020
Research Description: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.1.7 Ultimate Member <= 2.1.6 - Open Redirect The Ultimate Member plugin for WordPress is vulnerable to open redirects in versions up to, and including, 2.1.6 This is due to insufficient redirect location validation which makes it possible for unauthenticated attackers to trick victims into accessing malicious sites granted they can trick the victim into performing an action such as clicking on a link.
Affected versions: max 2.1.7.
Status: vulnerable

Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction &amp; Membership Plugin, bd5904e0ff07bbbdcd5d33770a948e713e56c451