Description
WordPress Plugin WP SEO Redirect 301 is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. WordPress Plugin WP SEO Redirect 301 version 2.3.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.3.2 or latest
References
https://sploitus.com/exploit?id=WPEX-ID:CF031259-B76E-475C-8A8E-FA6A0D9E7BB4
https://plugins.svn.wordpress.org/wp-seo-redirect-301/trunk/readme.txt
Related Vulnerabilities
Joomla! Core SQL Injection (1.7.0 - 3.9.15)
PHP Improper Input Validation Vulnerability (CVE-2016-4537)
Atlassian Jira URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2018-13401)
Jetty Improper Neutralization of Quoting Syntax Vulnerability (CVE-2023-36479)
WordPress Plugin Amazon Product in a Post SQL Injection (3.5.2)