Skip to content
Sign in
6.5 Medium

CVE-2023-1330 The Redirection WordPress plugin before 1.1.4 does not add nonce verification in place when adding the redirect, which…

Description

The Redirection WordPress plugin before 1.1.4 does not add nonce verification in place when adding the redirect, which could allow attackers to add redirects via a CSRF attack.

Affected products and versions

Product Affected versions Fixed in
Redirection 1.1 earliest → < 1.1.4 1.1.4

Other CVEs of Redirection

The 2 CVEs of Redirection →
CVE-2023-1331 The Redirection WordPress plugin before 1.1.5 does not have CSRF checks in the uninstall action, which could allow… 6.5 Medium
Track this CVE