Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:seo_redirection_plugin_–_301_redirect_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductSeo Redirection Plugin – 301 Redirect Manager (35c4d065-5c42-53cd-bfea-b679aaf31f0c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24847 vulnerable 2026-06-08 05:30:39.345930 SEO Redirection < 8.2 - Subscriber+ SQL Injection
The importFromRedirection AJAX action of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 8.2, available to any authenticated user, does not properly sanitise the offset parameter before using it in a SQL statement, leading an SQL injection when the redirection plugin is also installed
Published: 2021-11-17T10:15:51.000Z
Updated: 2024-08-03T19:42:17.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24327 vulnerable 2026-06-08 05:30:04.192479 SEO Redirection < 6.4 - Authenticated Stored Cross-Site Scripting (XSS)
The SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 6.4 did not sanitise the Redirect From and Redirect To fields when creating a new redirect in the dashboard, allowing high privilege users (even with the unfiltered_html disabled) to set XSS payloads
Published: 2021-05-17T16:48:54.000Z
Updated: 2024-08-03T19:28:24.001Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.