CVE-2024-3032

CVE-2024-3032 describes an Open Redirect vulnerability in the Themify Builder WordPress plugin versions prior to 7.5.8. This flaw allows an attacker to redirect users to arbitrary malicious websites due to improper validation of a redirection parameter. Rated as MEDIUM severity with a CVSS score of 6.1, the vulnerability can be exploited remotely with low attack complexity, requiring user interaction. A successful exploit could lead to information disclosure and potentially compromise user credentials through phishing. Currently, there is no evidence of active exploitation, and it is not listed on the CISA KEV catalog. While no Metasploit or ExploitDB modules exist, Nuclei templates are available, indicating potential for automated scanning and exploitation. Community discussion and media coverage are minimal.