Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88227
HistorySep 28, 2022 - 12:00 a.m.

WordPress SEO Redirection plugin cross-site request forgery vulnerability

2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

0.001 Low

EPSS

Percentile

20.9%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress SEO Redirection plugin 8.9 and earlier versions are vulnerable to cross-site request forgery. The vulnerability stems from the WEB application not adequately verifying that the request is from a trusted user. An attacker could use the vulnerability to spoof malicious requests to trick victims into clicking through to perform sensitive actions.

CPENameOperatorVersion
wordpress seo redirection pluginle8.9

0.001 Low

EPSS

Percentile

20.9%