301 Redirects – Redirect Manager

301 Redirects – Redirect Manager has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2023; all 3 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Missing Authorization, SQL Injection.

Every one of the 3 issues recorded for 301 Redirects – Redirect Manager has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. 301 Redirects – Redirect Manager is installed on roughly 300,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.0/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all 301 Redirects – Redirect Manager vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2021-24142

301 Redirects - Easy Redirect Manager < 2.51 - SQL Injection

Read the full analysis

Vulnerability Records

3 records
301 Redirects – Redirect Manager banner
Latestv2.85

301 Redirects – Redirect Manager

WebFactory

Author

WebFactory

4.7(578)
94/100
Last Updated
2026-08-15 (28d ago)
Active Installs
300,000+
Downloads
4,137,873
Requires WP
4.0+
Requires PHP
5.2+
Tested up to
WP 7.1
Created
2013-05-02 (14y ago)

301 Redirects helps you manage and create 301, 302, 307 redirects for WordPress site to improve SEO & visitor experience. 301 Redirects is easy to use. Perfect for new sites or repairing links after reorganizing your old content, or when your site has content that expires and you wish to avoid sending visitors to a 404 error page and want to create redirection instead. Use the 404 error log to identify problematic links & create new redirections. Having problems with spam, bots, or AI scrapers? Have a look at our free Captcha plugin used on over 200,000 sites. 301 Redirects GUI is located in WP Admin – Settings – 301 Redirects 404 Error Log widget can be found in the WP Admin – Dashboard – 404 Error Log Features Choose from Pages, Posts, Custom Post types, Archives, and Term Archives from dropdown menu to create redirection Or, set a custom destination URL! Retain query strings across redirects Super-fast redirection 404 error log 404 error log widget Import/Export feature for bulk redirects management Simple redirect stats so you know how much a redirection is used Fully compatible with translation plugins (Weglot, TranslatePress, Gtranslate, Loco Translate) that use lang prefix in URL Need more features? WP 301 Redirects PRO offers wildcard & regular expression URL matching, auto-typo fixing in URLs, complete redirect and 404 log, link scanner, and a centralized SaaS dashboard to monitor redirects on all your sites from one place. What is a 301 Redirect? A redirect is a simple way to re-route traffic coming to a Requested URL to different Destination URL. A 301 redirect indicates that the page requested has been permanently moved to the Destination URL, and helps pass on the Requested URLs traffic in a search engine friendly manner. Creating a 301 redirect tells search engines that the Requested URL has moved permanently, and that the content can now be found on the Destination URL. An important feature is that search engines will pass along any clout the Requested URL used to have to the Destination URL. When Should I use 301 Redirects? * Replacing an old site design with a new site design * Overhauling or re-organizing your existing WordPress content * You have content that expires (or is otherwise no longer available) and you wish to redirect users elsewhere Is the 404 error log GDPR friendly? The 404 error log does not collect user IPs. It collects the following data: timestamp of the event, the (404) URL that was opened, and the user-agent string. Having problems with SSL? Moving a site from HTTP to HTTPS? Install our free WP Force SSL plugin. It’s a great way to enable SSL and fix SSL problems. External libraries used in the project * PHP User Agent Parser

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C