Skip to content
Sign in
6.5 Medium

CVE-2023-1331 The Redirection WordPress plugin before 1.1.5 does not have CSRF checks in the uninstall action, which could allow…

Description

The Redirection WordPress plugin before 1.1.5 does not have CSRF checks in the uninstall action, which could allow attackers to make logged in admins delete all the redirections through a CSRF attack.

Affected products and versions

Product Affected versions Fixed in
Redirection 1.1 earliest → < 1.1.5 1.1.5

Other CVEs of Redirection

The 2 CVEs of Redirection →
CVE-2023-1330 The Redirection WordPress plugin before 1.1.4 does not add nonce verification in place when adding the redirect, which… 6.5 Medium
Track this CVE