CVE-2023-1330: Redirection < 1.1.4 - Redirect Creation via CSRF
Published Apr 3, 2023
·Updated
The Redirection WordPress plugin before 1.1.4 does not add nonce verification in place when adding the redirect, which could allow attackers to add redirects via a CSRF attack.
Affected Software
1 affected component
Inisev Redirection Wordpress<1.1.4
Event History
Apr 3, 2023
CVE Published
via MITRE·02:38 PM
Data Sourced
via MITRE·02:38 PM
DescriptionWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-1330.
2
What is the title of this vulnerability?
The title of this vulnerability is 'The Redirection WordPress plugin before 1.1.4 does not add nonce verification in place when adding t…'.
3
What is the description of this vulnerability?
The Redirection WordPress plugin before 1.1.4 does not add nonce verification in place when adding the redirect, which could allow attackers to add redirects via a CSRF attack.
4
What is the affected software?
The affected software is the 'Inisev Redirection' WordPress plugin version up to exclusive 1.1.4.
5
What is the severity of this vulnerability?
The severity of this vulnerability is medium with a CVSS score of 6.5.