/Vulnerability Library

User Registration & Membership WordPress plugin - Open Redirect

CVE-2026-6203
Verified

Description

User Registration & Membership WordPress plugin <= 5.1.4 contains an open redirect caused by insufficient validation of 'redirect_to_on_logout' parameter, letting attackers redirect users to malicious external URLs after logout, exploit requires crafted URL.

Severity

Medium

CVSS Score

6.1

Exploit Probability

1%

Published Date

April 14, 2026

Template Author

theamanrawat

CVE-2026-6203.yaml
6.1Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVE ID:
cve-2026-6203
CWE ID:
cwe-601

References

https://patchstack.com/database/vulnerability/wordpress-user-registration-membership-plugin-5-1-4-unauthenticated-open-redirect-via-redirect-to-on-logout-parameter-vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2026-6203

Remediation Steps

Update to a version later than 5.1.4 or the latest available version.