Description
The Redirection WordPress plugin before 1.1.4 does not add nonce verification in place when adding the redirect, which could allow attackers to add redirects via a CSRF attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Redirection | < 1.1.4 | 1.1.4 |
References
- https://wpscan.com/vulnerability/de4cff6d-0030-40e6-8221-fef56e12b4de exploit vdb-entry technical-description