CVE-2023-1331

PoC —

CVSS 3.1

6.5 medium

EPSS

<1%p26

Published

Apr 17, 2023 (Apr 17, 2023)

Modified

Jun 17, 2026

Description

The Redirection WordPress plugin before 1.1.5 does not have CSRF checks in the uninstall action, which could allow attackers to make logged in admins delete all the redirections through a CSRF attack.

Vendors: inisev
Products: redirection
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.