Unknown Redirection vulnerabilities
2 vulnerabilities
Known vulnerabilities in Unknown Redirection, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2023-1330inisev · redirection +2 moreRedirection < 1.1.4 - Redirect Creation via CSRFThe Redirection WordPress plugin before 1.1.4 does not add nonce verification in place when adding the redirect, which could allow attackers to add redirects via a CSRF attack.EPSS0.34%MediumCVE-2023-1331inisev · redirection +2 moreRedirection < 1.1.5 - Plugin Reset via CSRFThe Redirection WordPress plugin before 1.1.5 does not have CSRF checks in the uninstall action, which could allow attackers to make logged in admins delete all the redirections through a CSRF attack.EPSS0.33%