The Redirect Redirection plugin for WordPress, available in versions up to and including 1.1.3, has a security vulnerability. This vulnerability allows people with at least a “subscriber” level of access to modify the settings of the plugin without authorization.