All In One Redirection

All In One Redirection has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; 2 are fixed and 1 remains unpatched as of October 2026. Their average CVSS score is 6.3, and the most serious one scores 6.6 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include SQL Injection.

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2024.

3 independent researchers contributed these findings, one record each. All In One Redirection is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.7.

Strategic Overview

Avg CVSSMedium
6.3/ 10
Patch Coverage67%
Open

1

Fixed

2

Get automatic notifications for all All In One Redirection vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2024-30506

All In One Redirection <= 2.2.0 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records
All In One Redirection banner
Latestv2.3

All In One Redirection

Vsourz Digital

Author

Vsourz Digital

4.4(11)
88/100
Last Updated
2026-08-19 (2mo ago)
Active Installs
1,000+
Downloads
46,942
Requires WP
3.6.0+
Requires PHP
0+
Tested up to
WP 7.0.7
Created
2017-07-22 (9y ago)

Best ways that indicate the page has Permanently/Temporary moved to a new location. Best recommended to set up 301 redirects in 1:1 relationship in WordPress when you change the URLs of your posts and pages or move your website from one domain to another to manage their page rank (or what-have-you) will be passed along to them. Manage redirection list with Access Date, Source URL, Referrer, Access IP and Hits. Manage the requested URL structure with host and www settings. Don’t require to write rules in Apache .htaccess – it works entirely inside WordPress. Eg: If you need to redirect all the old &#8216;HTTP’ URL to new secure &#8216;HTTPS’ URL then you just need to activate the plugin, it will set destination URL based on your WordPress Site URL and if you want to do custom settings in host/www then you can change it from Redirection Setting in plugin menu. Keep tracking of 404 pages and redirect on relevant pages – Capture 404 pages from the website with their Access Date, Source URL, Referrer, Access IP, Hits, easily find that URLs and redirect it to relevant pages with Action tab. Bulk Import/Export – Download/Upload redirection URLs in csv format from Tool in plugin menu. It’s 100% free! Need Support? &#x77;&#x70;&#x2e;&#x73;&#117;&#112;&#112;&#111;&#114;&#116;&#064;&#118;&#115;&#111;&#117;rz&#x2e;&#x63;&#x6f;&#x6d; Features 301/302 Redirection. All 404 Redirect to Homepage on One Click. All redirection is occur based on 1:1 relationship for best SEO practice. Bulk Import/Export in CSV format of redirection list. Full logs of all redirected URLs with Last Access Date, Referrer URL and Access IP address. You can find the number of Hits in redirection links. Redirection based on Regular Expression. Option to hide the URL redirection, so you can exclude any URL from redirection list. Exclude the back-end from redirection Entire website redirected on another website Multiple Update/Delete option. Auto 404 page Tracking with Access Date, Source URL, Referrer, Access IP. Custom Redirection based on host and www setting. Apache .htaccess is not required – works entirely inside WordPress. WWW to NON-WWW and NON-WWW to WWW redirection without Apache .htaccess rules. HTTP to HTTPS and HTTPS to HTTP redirection without Apache .htaccess rules. How to use? Install and activate the plugin. Add new redirection rule. You need to save the Redirection Setting once if you change the domain. License GPLv2 – https://www.gnu.org/licenses/gpl-2.0.html

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C