CVE-2023-1330
Medium
Description
The Redirection WordPress plugin before 1.1.4 does not add nonce verification in place when adding the redirect, which could allow attackers to add redirects via a CSRF attack.
SeverityMedium
CVSS6.5
Exploit probability—
ProductInisev Redirection
PublishedApr 3, 2023
First seenApr 3, 2023
Weakness typeCWE-352Cross-site request forgery (CSRF)
How to fix
Update
- inisev redirection1.1.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| inisev redirection | v < 1.1.4 | 1.1.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.