Vulnerability · Published Dec 29, 2023 · Assigned by Patchstack

CVE-2023-51675WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Open Redirection

Medium 4.7

In plain English

A medium-severity open redirect in Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More from AAM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).

Severity (CVSS 3.1)4.7Medium

Exploit odds (30 days)0.3%top 77.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in AAM Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More.This issue affects Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More: from n/a through 6.9.18.

Affected products (as reported)

Vendor	Product	Versions
AAM	Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More	n/a – through 6.9.18

Weakness: CWE-601 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

References

https://patchstack.com/database/vulnerability/advanced-access-manager/wordpress-advanced-access-manager-plugin-6-9-18-open-redirection-vulnerability?_s_id=cve vdb-entry