Description

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership is prone to an open redirect vulnerability because the application fails to properly verify user-supplied input. Exploiting this issue may allow attackers to redirect users to arbitrary web sites and conduct phishing attacks; other attacks are also possible. WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership version 2.3.1 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 2.3.2 or latest

References

https://github.com/H4de5-7/vulnerabilities/blob/main/Ultimate%20Member%20%3C%3D%202.3.1%20-%20Open%20Redirect.md

https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1209

https://plugins.svn.wordpress.org/ultimate-member/trunk/readme.txt

Related Vulnerabilities

ZenCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-6578)

SharePoint Integer Overflow or Wraparound Vulnerability (CVE-2008-4019)

WordPress Plugin AdRoll for WooCommerce Stores Unspecified Vulnerability (2.2.5)

PHP Other Vulnerability (CVE-2003-0442)

WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions SQL Injection (2.9.7)

Severity

High

Classification

CVE-2022-1209 CWE-601 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Url Redirection