CVE-2023-1330

Redirection < 1.1.4 - Redirect Creation via CSRF

Medium · published April 3, 2023

CVSS v3.1
6.5
EPSS
0%
Percentile
26.7
In the wild
Unconfirmed
What it is

The Redirection WordPress plugin before 1.1.4 does not add nonce verification in place when adding the redirect, which could allow attackers to add redirects via a CSRF attack.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00344 · 26.7th percentile
Published
2023-04-03T14:38Z
EPSS history
Timeline
  • 03 APR 14:38Z
    Redirection < 1.1.4 - Redirect Creation via CSRF
    cvelistv5