Medium · 4.7 CVE-2023-38478 EUVD-2023-42294GHSA-vpmf-fp9g-fw23

WordPress Integration for WooCommerce and QuickBooks Plugin <= 1.2.3 is vulnerable to Open Redirection

Published Dec 19, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: CRM Perks Product: Integration for WooCommerce and QuickBooks Category: Web / CMS

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and QuickBooks.This issue affects Integration for WooCommerce and QuickBooks: from n/a through 1.2.3.

Affected products

Vendor	Product	Affected	Fixed
CRM Perks	Integration for WooCommerce and QuickBooks	≤ 1.2.3	—

References

https://patchstack.com/database/vulnerability/wp-woocommerce-quickbooks/wordpress-integration-for-woocommerce-and-quickbooks-plugin-1-2-3-open-redirection-vulnerability?_s_id=cve vdb-entry