5.4 Medium

CVE-2022-38704 Cross-Site Request Forgery (CSRF) vulnerability in SEO Redirection…

Description

Cross-Site Request Forgery (CSRF) vulnerability in SEO Redirection plugin <= 8.9 at WordPress, leading to deletion of 404 errors and redirection history.

Affected products and versions

Product	Affected versions	Fixed in
SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin) 8.9	earliest → 8.9	No fix stated

The 2 CVEs of SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin) →

CVE-2022-40695 Multiple Cross-Site Scripting (CSRF) vulnerabilities in SEO Redirection Plugin plugin <= 8.9 on WordPress 5.4 Medium

Do you use SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin)?

Track this CVE Watch SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin) Check my SBOMs

www.cveye.io/en/cve/CVE-2022-38704

Timeline

Published September 23, 2022
Last modified April 28, 2026

References

patchstack.com patchstack.com
wordpress.org wordpress.org

Track this CVE

CVE-2022-38704 Cross-Site Request Forgery (CSRF) vulnerability in SEO Redirection…

Description

Affected products and versions

Other CVEs of SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin)