Redirection
Redirection has 30 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 30 are fixed as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 5.4 out of 10. 2023 was the busiest year with 29 disclosures.
The most common weakness is Missing Authorization, behind 18 of the records (60%). Other recurring categories include Cross-Site Request Forgery (CSRF).
Every one of the 30 issues recorded for Redirection has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, most of them (2) reported by Chloe Chamberland. Redirection is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2023-1331Redirection <= 1.1.4 - Cross-Site Request Forgery to Plugin Reset
Read the full analysisVulnerability Records

Redirection
Author
Inisev
Try it out on your free dummy site: Click here => https://tastewp.com/plugins/redirect-redirection. (this trick works for all plugins in the WP repo – just replace “wordpress” with “tastewp” in the URL) Create specific URL redirections and redirection rules super-easily on a beautiful, user-friendly interface of the Redirection plugin. Creating even conditional redirections has never been easier and quicker than with the Redirection plugin. Creating redirection has never been simpler, but for fine-tuning, you can use a wide choice of advanced options: Redirect HTTP codes can be 301, 302, 303, 304, 307 and 308; Inclusion and exclusion rules: logged in/out users, specific user role, user’s referrer link, user’s agent, user’s cookie, user’s IP, server, and language; Redirection rules: Simplified redirection rules as well as advanced RegEx matches – URLs that contain specific string to new or removed string, URLs that start with X, specific permalink structures, RegEx matches, and 404s. Setting redirection rules with several matching conditions is also possible; Managing all redirects comfortably – enable/disable, edit and delete redirects neatly listed in the plugin menu; ⭐️NEW! 404 page redirection to a Specific URL (e.g. homepage) or to a Random Similar Post; ⭐️NEW! Import/Export redirection lists (both Specific URL Redirections and Redirection Rules); ⭐️NEW! Redirection & 404 Logs – chronological log of all redirections and 404s with a one-click solution to add the redirection and fix the dead links; Automatic redirects, Change URL – these features are coming soon! This redirect plugin is part of the Inisev product family. Have a look at our other projects too please! 🙂
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C