Medium · 5.4 CVE-2022-38704 EUVD-2022-41273GHSA-qhg4-wfwm-7qcr

WordPress SEO Redirection plugin <= 8.9 - Cross-Site Request Forgery (CSRF) vulnerability

Published Sep 23, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: wp-buy Product: SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in SEO Redirection plugin <= 8.9 at WordPress, leading to deletion of 404 errors and redirection history.

Affected products

Vendor	Product	Affected	Fixed
WP-buy	SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin)	<= 8.9 – ≤ 8.9	—

References

https://patchstack.com/database/vulnerability/seo-redirection/wordpress-seo-redirection-plugin-8-9-cross-site-request-forgery-csrf-vulnerability/_s_id=cve
https://wordpress.org/plugins/seo-redirection/#developers