Medium severity6.1NVD Advisory· Published Mar 20, 2024· Updated Jun 17, 2026
CVE-2024-0337
CVE-2024-0337
Description
The Travelpayouts: All Travel Brands in One Place WordPress plugin through 1.1.15 is vulnerable to Open Redirect due to insufficient validation on the travelpayouts_redirect variable. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<=1.1.15+ 1 more
- (no CPE)range: <=1.1.15
- (no CPE)range: <=1.1.15
- cpe:2.3:a:travelpayouts:travelpayouts:*:*:*:*:*:wordpress:*:*Range: <1.1.17
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/2f17a274-8676-4f4e-989f-436030527890/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.