| Package | Affected versions | Patched versions |
|---|---|---|
| redirection | < 1.1.5 | 1.1.5 |
The Redirection WordPress plugin before 1.1.5 does not have CSRF checks in the uninstall action, which could allow attackers to make logged in admins delete all the redirections through a CSRF attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free