Input validation vulnerability in Redirection 1.1.3

The Redirect Redirection WordPress plugin has a security vulnerability in versions up to and including 1.1.3. This vulnerability makes it possible for unauthenticated attackers to delete redirect rules in bulk without needing to authenticate. This is because the plugin did not have the correct security measures in place to prevent such an attack, such as the validation of a nonce. It could be exploited if someone could trick a site administrator into clicking on a malicious link.

Detected in:

Redirection fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.