Extension WordPress
Vulnérabilités SEO Redirection Plugin – 301 Redirect Manager
Cette page rassemble les failles publiées pour SEO Redirection Plugin – 301 Redirect Manager, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de SEO Redirection Plugin – 301 Redirect Manager
10 fiches
SEO Redirection Plugin – 301 Redirect Manager <= 9.17 – Unauthenticated Stored Cross-Site Scripting
The SEO Redirection Plugin – 301 Redirect Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 9.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
*-9.17
9.18
12/06/2026
SEO Redirection Plugin <= 8.9 – Cross-Site Request Forgery
The SEO Redirection Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.9. This is due to missing nonce validation in the option_page_history.php and option_page_404.php files. This makes it possible for…
*-8.9
9.1
25/10/2022
SEO Redirection Plugin – 301 Redirect Manager <= 8.9 – Cross-Site Request Forgery
The SEO Redirection Plugin – 301 Redirect Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.9. This is due to missing nonce validation in the ~/options/option_page_404.php and ~/options/option_page_history.php files. This…
*-8.9
9.1
01/08/2022
SEO Redirection <= 8.1 – Subscriber+ SQL Injection
The importFromRedirection AJAX action of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 8.2, available to any authenticated user, does not properly sanitise the offset parameter before using it in a SQL statement, leading an…
*-8.1
8.2
18/10/2021
SEO Redirection Plugin – 301 Redirect Manager <= 7.8 – Cross-Site Request Forgery
The SEO Redirection Plugin – 301 Redirect Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 7.8. This is due to missing or incorrect nonce validation. This makes it possible for…
*-7.8
7.9
15/09/2021
SEO Redirection Plugin – 301 Redirect Manager <= 7.3 – Reflected Cross-Site Scripting
The SEO Redirection plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in versions up to, and including, 7.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers…
*-7.3
7.4
13/09/2021
SEO Redirection <= 6.4 – Authenticated Stored Cross-Site Scripting
The SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 7.1 did not sanitise the Redirect From and Redirect To fields when creating a new redirect in the dashboard, allowing high privilege users (even with the unfiltered_html…
*-6.4
7.1
16/04/2021
SEO Redirection Plugin – 301 Redirect Manager <= 6.3 – Reflected Cross-Site Scripting
The setting page of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 6.4 is vulnerable to reflected Cross-Site Scripting (XSS) as user input is not properly sanitised before being output in an attribute.
*-6.3
6.4
16/03/2021
SEO Redirection <= 4.2 – Stored Cross-Site Scripting
The SEO Redirection plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an unknown parameter in versions up to, and including, 4.2 due to insufficient input sanitization and output escaping. This makes it possible for attackers to…
[*, 4.3)
4.3
25/08/2015
SEO Redirection <= 2.8 – Reflected Cross-Site Scripting
The SEO Redirection Plugin – 301 Redirect Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search’ parameter in versions before 2.9 due to insufficient input sanitization and output escaping. This makes it possible for…
[*, 2.9)
2.9
21/08/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.