Input validation vulnerability in Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More 6.9.18

The Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More plugin for WordPress has a security issue that affects all versions up to and including 6.9.18. This issue could allow someone with an authorized account (such as an author or higher) to trick users into going to a malicious website if they can get them to perform an action, such as logging in. This is because the plugin does not properly validate the website address it redirects users to when they take an action.