CVE Database /
CVE-2022-1209
CVE · Medium
CVE-2022-1209 — Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.3.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-1209
|
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin [ultimate-member] < 2.3.2 |
URL Redirection to Untrusted Site ('Open Redirect') |
Medium
5.4
|
< 2.3.2
|
2.3.2 |
2022-04-29 |
—
|
CVE-2022-1209
The Ultimate Member plugin is vulnerable to arbitrary redirect attacks through inadequately validated URLs in social media fields on the Profile Page. An attacker can craft malicious social field entries to redirect users to arbitrary external websites. This vulnerability affects all versions up to and including 2.3.1, with the flaw being corrected in version 2.3.2.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings