Beveiligingsadvies

CVE-2026-80072

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-13 06:00:08

Laatst bijgewerkt 2026-09-13 10:45:38

Toegewezen door WPScan

CVSS-score 4.7

Status PUBLISHED

Beschrijving

The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-login redirect before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL, which can be abused for phishing.

← Alle CVE's bekijken Bekijk op cve.org ↗