CVE-2023-1331

creationtimestamp| type| source ---|---|--- 2023-04-17 16:38:45+00:00| seen| https://t.me/cibsecurity/62272...

CVE-2023-1331 Redirection < 1.1.5 - Plugin Reset via CSRF

The Redirection WordPress plugin before 1.1.5 does not have CSRF checks in the uninstall action, which could allow attackers to make logged in admins delete all the redirections through a CSRF attack...

CVE-2023-1331

CVE-2023-1331 affects the WordPress Redirection plugin prior to version 1.1.5. The vulnerability is a CSRF flaw in the uninstall action that can allow an authenticated admin to delete all redirects via a CSRF attack. Root cause: missing CSRF checks in uninstall logic. Impact stated: allows manipu...

WordPress Redirect Redirection Plugin < 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Redirect Redirection Type Plugin Vulnerable versions 1.1.5 Fixed in 1.1.5 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-1331 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2e8614381128 Credits Mohamed Selim...