CVE-2026-39600

4.7 MEDIUM

Published 2026-10-02 · Updated 2026-10-07

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Mehul Gohil Aculect AI Companion aculect-ai-companion allows Phishing.This issue affects Aculect AI Companion: from n/a through 0.8.2.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Weaknesses

CWE-601

All references

https://patchstack.com/database/wordpress/plugin/aculect-ai-companion/vulnerability/wordpress-aculect-ai-companion-plugin-0-8-1-unvalidated-redirects-and-forwards-vulnerability?_s_id=cve

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2024-58389PoC
MEDIUMCVE-2024-58398PoC
MEDIUMCVE-2026-100523PoC
CRITICALCVE-2026-101090PoC
MEDIUMCVE-2026-101151
HIGHCVE-2026-101152
UNSCOREDCVE-2026-101907PoC
MEDIUMCVE-2026-102090PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.