Vulnerabilities

TI-2022-19330 CVE-2022-40695 · GHSA-ppw9-v5cx-fvvp

WordPress SEO Redirection Plugin plugin <= 8.9 - Multiple Cross-Site Scripting (CSRF) vulnerabilities

LOW 38

Multiple Cross-Site Scripting (CSRF) vulnerabilities in SEO Redirection Plugin plugin <= 8.9 on WordPress.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00312 Published 2022-11-18 No fix listed CWE-352

TI-2022-18237 CVE-2022-38704 · GHSA-qhg4-wfwm-7qcr

WordPress SEO Redirection plugin <= 8.9 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in SEO Redirection plugin <= 8.9 at WordPress, leading to deletion of 404 errors and redirection history.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.0031 Published 2022-09-23 No fix listed CWE-352

TI-2021-06479 CVE-2021-24187 · GHSA-p44m-m5cf-5q6f

SEO Redirection < 6.4 - Authenticated Reflected Cross-Site Scripting (XSS)

LOW 25

The setting page of the SEO Redirection Plugin - 301 Redirect Manager WordPress plugin before 6.4 is vulnerable to reflected Cross-Site Scripting (XSS) as user input is not properly sanitised before being output in an at…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00632 Published 2021-04-05 Fixed in 6.4 CWE-79

TI-2016-08934 CVE-2016-10896 · GHSA-rmc2-9q39-m4r3

The seo-redirection plugin before 4.3 for WordPress has stored XSS.

LOW 29

The seo-redirection plugin before 4.3 for WordPress has stored XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00913 Published 2019-08-21 No fix listed CWE-79

Vulnerabilities

Filters

WordPress SEO Redirection Plugin plugin <= 8.9 - Multiple Cross-Site Scripting (CSRF) vulnerabilities

WordPress SEO Redirection plugin <= 8.9 - Cross-Site Request Forgery (CSRF) vulnerability

SEO Redirection < 6.4 - Authenticated Reflected Cross-Site Scripting (XSS)

The seo-redirection plugin before 4.3 for WordPress has stored XSS.