Threats tagged 'ghsa-w78c-fx7q-9x8m'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.7	EPSS 0.3%	CVE-2026-80072The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-login Medium4.7EPSS 0.3%2026-09-13GCVE DatabaseCVE-2026-80072 The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-login redirect before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL, which can be abused for phishing. EPSS 0.3%Report on CVE-2026-80072 Vulnerability CWE-601 #ghsa-w78c-fx7q-9x8m	GCVE Database	2026-09-13

Page 1 of 1