Description
Cross-Site Request Forgery (CSRF) vulnerability in SEO Redirection plugin <= 8.9 at WordPress, leading to deletion of 404 errors and redirection history.
References (2)
Core 2
Core References
Broken Link x_refsource_confirm
https://patchstack.com/database/vulnerability/seo-redirection/wordpress-seo-redirection-plugin-8-9-cross-site-request-forgery-csrf-vulnerability/_s_id=cve
Product x_refsource_confirm
https://wordpress.org/plugins/seo-redirection/#developers
Scores
CVSS v3
5.4
EPSS
0.0025
EPSS Percentile
16.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-352
Status
published
Products (2)
clogica/seo_redirection
< 8.9
WP-buy/SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin)
<= 8.9 - 8.9
Published
Sep 23, 2022
Tracked Since
Feb 18, 2026