Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-13703

SEO Redirection Plugin – 301 Redirect Manager < 9.19 - Subscriber+ Redirect Rule Disclosure

The SEO Redirection Plugin WordPress plugin before 9.19 does not perform a capability check in one of its authenticated AJAX actions, allowing any logged-in user such as a subscriber to read the site's configured 301 redirect rules, including their source and destination URLs.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Clogica Wordpress
Products
Seo Redirection Plugin Wordpress
CVE-2021-24327

SEO Redirection < 6.4 - Authenticated Stored Cross-Site Scripting (XSS)

The SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 6.4 did not sanitise the Redirect From and Redirect To fields when creating a new redirect in the dashboard, allowing high privilege users (even with the unfiltered_html disabled) to set XSS payloads

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Clogica
Products
Seo Redirection Plugin
CVE-2021-24325

404 SEO Redirection <= 1.3 - Reflected Cross-Site Scripting (XSS)

The tab parameter of the settings page of the 404 SEO Redirection WordPress plugin through 1.3 is vulnerable to a reflected Cross-Site Scripting (XSS) issue as user input is not properly sanitised or escaped before being output in an attribute.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Clogica
Products
Seo Redirection Plugin