CVE-2024-22308

The Simple Membership plugin before version 4.4.2 contains an open redirection flaw where user-supplied redirect URLs are not properly validated before being used. An attacker could exploit this vulnerability to redirect users from the legitimate site to a malicious destination, potentially facilitating phishing attacks or other social engineering schemes. The vulnerability was discovered by Joshua Chan and has been resolved in version 4.4.2 and later.

Based on public CVE data (MITRE/NVD).