CVE-2024-49682

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership simple-membership allows Phishing.This issue affects Simple Membership: from n/a through <= 4.5.3.

Score

CVSS 3.1 6.1 Medium

Status

Modified - audit@patchstack.com

Published

2024-10-24

Last modified

2026-04-28

Weaknesses

CWE-601

Affected products

• Simple Membership (Simple-membership-plugin)
• Simple Membership (Wp.insider)

References

• https://patchstack.com/database/Wordpress/Plugin/simple-membership/vulnerability/wordpress-simple-membership-plugin-4-5…