Lucene search
WpvulndbWPVDB-ID:504F896C-44BB-4452-A66A-E15FC508E6C2HistoryApr 29, 2022 - 12:00 a.m.
Ultimate Member < 2.3.2 - Open Redirect
2022-04-2900:00:00
wpscan.com
12
ultimate member
open redirect
vulnerability
social fields
profile page
insufficient validation
url
attackers
EPSS
0.002
Percentile
60.5%
The plugin is vulnerable to open redirects due to insufficient validation on supplied URLs in the social fields of the Profile Page, which makes it possible for attackers to redirect unsuspecting victims
Related
patchstack
patchstack
WordPress Ultimate Member plugin <= 2.3.1 - Open Redirect vulnerability
2022-05-01 00:00:00
nvd
nvd
CVE-2022-1209
2022-05-10 20:15:08
prion
prion
Input validation
2022-05-10 20:15:00
cnvd
cnvd
WordPress Ultimate Member plugin arbitrary redirection vulnerability
2022-05-12 00:00:00
cvelist
cvelist
CVE-2022-1209
2022-05-10 19:34:42
osv
osv
CVE-2022-1209
2022-05-10 20:15:08
cve
cve
CVE-2022-1209
2022-05-10 20:15:08
openvas
openvas
WordPress Ultimate Member Plugin <= 2.3.1 Open Redirect Vulnerability
2022-05-11 00:00:00