CVE-2022-1209

Published May 10th, 2022

View on NVD ↗

CVSS v3

4.3

MEDIUM

CVSS v2

3.5

LOW

Affected

PROJECTS

Description

The Ultimate Member plugin for WordPress is vulnerable to arbitrary redirects due to insufficient validation on supplied URLs in the social fields of the Profile Page, which makes it possible for attackers to redirect unsuspecting victims in versions up to, and including, 2.3.1.

H4de5-7/vulnerabilities

GitHub

ultimatemember/ultimatemember

The easiest way to create powerful online communities and beautiful user profiles with WordPress

GitHub

262