CVE-2024-49682 - WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability

Back Back to CVE browser

MEDIUM

WordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerability

Published Oct 24, 2024

6.1

MEDIUM

CVSS 3.1

EPSS 0.27%

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership simple-membership allows Phishing.This issue affects Simple Membership: from n/a through <= 4.5.3.

Affected products

Vendor Wp.insider Product Simple Membership Default
unaffected
Affected
- ≥ 0, ≤ 4.5.3

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Wp.insider	Simple Membership	unaffected	Affected ≥ 0, ≤ 4.5.3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-43538		Advisory
https://patchstack.com/database/Wordpress/Plugin/simple-membership/vulnerability/wordpress-simple-membership-plugin-4-5-3-open-redirection-vulnerability?_s_id=cve		vdb-entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Patchstack

Published Oct 24, 2024

Updated Apr 28, 2026

Reserved Oct 17, 2024

Link CVE-2024-49682

CISA Vulnrichment

Updated Oct 24, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2024-49682

Red Hat

No data

ENISA EUVD

Assigner Patchstack

Published Oct 24, 2024

Updated Apr 28, 2026

Link EUVD-2024-43538

GitHub

No data