CVE-2022-1209 — Ultimate Member <= 2.3.1 - Arbitrary Redirect
The Ultimate Member plugin for WordPress is vulnerable to arbitrary redirects due to insufficient validation on supplied URLs in the social fields of the Profile Page, which mak…
Published: 2022-05-10 · CVSS: 4.3 · CVSS 3.1
The Ultimate Member plugin for WordPress is vulnerable to arbitrary redirects due to insufficient validation on supplied URLs in the social fields of the Profile Page, which makes it possible for attackers to redirect unsuspecting victims in versions up to, and including, 2.3.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7