Veille CVE

Recherche « Unknown SEO Redirection Plugin »

2 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown SEO Redirection Plugin » ✕
  1. CVE-2026-104754 3.5 Faible

    Unknown Rank Math SEO

    The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections (Administrators by default) to store JavaScript that executes in the session of any user who later opens that view, including a Super Administrator on multisite.

  2. CVE-2026-13703 5.4 Moyenne

    Unknown SEO Redirection Plugin

    The SEO Redirection Plugin WordPress plugin before 9.19 does not perform a capability check in one of its authenticated AJAX actions, allowing any logged-in user such as a subscriber to read the site's configured 301 redirect rules, including their source and destination URLs.