Extension WordPress
Vulnérabilités 301 Redirects – Redirect Manager
Cette page rassemble les failles publiées pour 301 Redirects – Redirect Manager, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de 301 Redirects – Redirect Manager
3 fiches
301 Redirects – Easy Redirect Manager <= 2.72 – Cross-Site Request Forgery via dismiss_notice
The 301 Redirects – Easy Redirect Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.73. This is due to missing or incorrect nonce validation on the 'dismiss_notice' function. This makes…
*-2.72
2.73
08/03/2023
301 Redirects – Easy Redirect Manager < 2.51 – SQL Injection
Unvaludated input in the 301 Redirects – Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its "Redirect From" column when importing a CSV file, allowing high privilege users to perform SQL injections.
[*, 2.51)
2.51
18/01/2021
301 Redirects – Easy Redirect Manager <= 2.40 – Missing Authorization
The "301 Redirects – Easy Redirect Manager" plugin before 2.45 for WordPress allows users (with subscriber or greater access) to modify, delete, or inject redirect rules, and exploit XSS, with the /admin-ajax.php?action=eps_redirect_save and /admin-ajax.php?action=eps_redirect_delete actions. This could result…
*-2.40
2.45
19/12/2019
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.