Odihost Easy Redirect 301 Vulnerabilities

The Easy 301 Redirects plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.33. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site adm...

CVSS:

4.3

Affected:

up to 1.33

Fix:

No patched version reported

Disclosed:

Mar 24, 2025

CVE-2025-30557 on NVD →