WPFactory Scheduled & Automatic Order Status Controller for WooCommerce Open Redirect Vulnerability

A URL redirection vulnerability allowing open redirects has been identified in the WPFactory Scheduled & Automatic Order Status Controller for WooCommerce, affecting versions through 3.7.1. This vulnerability could be exploited for phishing attacks by redirecting users to untrusted sites.

Impact

Exploitation of this vulnerability could lead to phishing incidents, as users might be tricked into visiting malicious sites under the guise of legitimate ones.

Remediation

Users of the WPFactory Scheduled & Automatic Order Status Controller for WooCommerce should update to version 3.7.2 or later to address this vulnerability.