Medium · 4.3 CVE-2025-30557 EUVD-2025-7977GHSA-4r9j-v95c-pgxw

WordPress Easy 301 Redirects plugin <= 1.33 - Cross Site Request Forgery (CSRF) vulnerability

Published Mar 24, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: odihost Product: Easy 301 Redirects

Description

Cross-Site Request Forgery (CSRF) vulnerability in odihost Easy 301 Redirects odihost-easy-redirect-301 allows Cross Site Request Forgery.This issue affects Easy 301 Redirects: from n/a through <= 1.33.

Affected products

Vendor	Product	Affected	Fixed
odihost	Easy 301 Redirects	≤ 1.33	—

References

https://patchstack.com/database/Wordpress/Plugin/odihost-easy-redirect-301/vulnerability/wordpress-easy-301-redirects-plugin-1-33-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry