CVE-2022-40695
MEDIUMSEO Redirection Plugin <= 8.9 - Cross-Site Request Forgery
Title source: llmDescription
Multiple Cross-Site Scripting (CSRF) vulnerabilities in SEO Redirection Plugin plugin <= 8.9 on WordPress.
References (2)
Core 2
Core References
Release Notes, Third Party Advisory
https://wordpress.org/plugins/seo-redirection/#developers
Scores
CVSS v3
5.4
EPSS
0.0028
EPSS Percentile
19.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-352
Status
published
Products (2)
clogica/seo_redirection
< 9.1
WP-buy/SEO Redirection Plugin – 301 Redirect Manager (WordPress plugin)
<= 8.9 - 8.9
Published
Nov 18, 2022
Tracked Since
Feb 18, 2026