Vulnerable Simple Membership After Login Redirection v1.8

Thank you for reaching out to us. Can you please provide more information regarding the vulnerability message illustrated in the image above. No one has reported any issues for version 1.8.

Thank you.

When will it be fixed?

https://patchstack.com/database/vulnerability/simple-membership-after-login-redirection/wordpress-simple-membership-after-login-redirection-plugin-1-6-open-redirection-vulnerability?_a_id=110

@piska the link above states that updating our plugin, “addon” to version 1.7 and above fixes the issue. So to me it sounds like your message is a false positive.

Kind regards.

In my Plesk toolkit, like piska, I still see a vulnerability, even though I’m already using Simple Membership After Login Redirection v1.8.
According to WordFence, the bug has been fixed in v.1.7: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/simple-membership-after-login-redirection/simple-membership-after-login-redirection-16-open-redirect

I’m surprised, though, that the Plesk toolkit, which gets information from WordFence, still shows the vulnerability. So I suspect that WordFence doesn’t yet have the information that there is already a version v1.8. Does the plugin contain clear version information?

@vscharfe this does sound like a false positive. There is no vulnerability at present in our plugin. If there was, WordPress developers would have stopped allowing our addon to be downloaded by the WordPress community.

Also, you might like to try the latest version 1.9. See if that fixes the issue with your server.

Kind regards.

• This reply was modified 1 month, 3 weeks ago by mbrsolution.

Great. Update 1.9 fixed the error message in Plesk. Many thanks.