Plugin security history

Redirection Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 30 vulnerability records associated with Redirection, published between 2023 and 2024.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

30Total records

0Critical

0High

30Medium

0Low

0Informational

30Patched records

0Currently marked unpatched

2023-02-21First disclosure

2024-04-10Latest disclosure

5 of 30CVE coverage

Year-by-Year Timeline

Year	Records	Relative volume
2023	29	29 records
2024	1	1 records

Severity Breakdown

Severity	Records	Share
Medium	30	100%

Vulnerability-Type Breakdown

Missing Authorization

18 records60%

First: 2023. Latest: 2024.

CSRF

12 records40%

First: 2023. Latest: 2023.

Patch Status

Patched: 30
Currently marked unpatched: 0
Unknown status: 0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

1.2.0
1.1.5
1.1.4

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected range	Vulnerability	Published	Patched version	Severity
`*-1.1.9`	Inisev Analyst Module <= Various Versions - Missing Authorization	April 10, 2024	1.2.0	Medium
`*-1.1.3`	Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function	July 27, 2023	1.1.4	Medium
`*-1.1.3`	Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function	July 27, 2023	1.1.4	Medium
`*-1.1.4`	Redirection <= 1.1.4 - Cross-Site Request Forgery to Plugin Reset	March 21, 2023	1.1.5	Medium
`*-1.1.4`	Redirect Redirection <= 1.1.4 - Cross-Site Request Forgery to Plugin De-Installation	March 14, 2023	1.1.5	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'addRedirect' function	February 22, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Missing Authorization in 'LoadTab' function	February 22, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'instantEditRedirect' function	February 21, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Missing Authorization in 'saveRedirectSettings' function	February 21, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Missing Authorization in 'statusBulkEdit' function	February 21, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Missing Authorization in 'bulkDelete' function	February 21, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Missing Authorization in 'selectAll' function	February 21, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Missing Authorization in 'logPageContent' function	February 21, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'cronLogDeleteOption' function	February 21, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'deleteRedirect' function	February 21, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Missing Authorization in 'logFilter' function	February 21, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Missing Authorization in 'addRedirectRule' function	February 21, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Missing Authorization in 'loadSettings' function	February 21, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Missing Authorization in 'liveSearch' function	February 21, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Missing Authorization in 'loadRedirectSettings' function	February 21, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'saveRedirectSettings' function	February 21, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'addRedirectRule' function	February 21, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Missing Authorization in 'instantEditRedirect' function	February 21, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'statusBulkEdit' function	February 21, 2023	1.1.4	Medium
`*-1.1.3`	Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'bulkDelete' function	February 21, 2023	1.1.4	Medium

Selected source records

Latest Records

MediumCVE-2024-31435

Inisev Analyst Module <= Various Versions - Missing Authorization

Published: April 10, 2024

Affected versions: *-3.2.6
Patched versions: 3.2.7

Affected versions: *-1.4.4
Patched versions: 1.4.5

Affected versions: *-3.6.1
Patched versions: 3.6.2

Affected versions: *-2.2.9
Patched versions: 2.3.0

Affected versions: *-1.4.1
Patched versions: 1.4.2

Affected versions: *-1.2.3
Patched versions: 1.2.4

Affected versions: *-1.1.9
Patched versions: 1.2.0

Affected versions: *-2.4.3
Patched versions: 2.4.4

Affected versions: *-3.9
Patched versions: 4.0

Affected versions: *-2.8.6
Patched versions: 2.8.7

Affected versions: *-1.6.4
Patched versions: 1.6.5

Original Wordfence record

MediumCVE-2023-3977

Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function

Published: July 27, 2023

Affected versions: *-3.2.3
Patched versions: 3.2.4

Affected versions: *-1.3.9
Patched versions: 1.4.0

Affected versions: *-3.5.7
Patched versions: 3.5.8

Affected versions: *-2.2.4
Patched versions: 2.2.5

Affected versions: *-1.2.7
Patched versions: 1.2.8

Affected versions: *-1.1.9
Patched versions: 1.2.0

Affected versions: *-1.1.3
Patched versions: 1.1.4

Affected versions: *-2.3.7
Patched versions: 2.3.8

Affected versions: *-2.8.1
Patched versions: 2.8.2

Affected versions: *-3.7
Patched versions: 3.8

Affected versions: *-1.5.7
Patched versions: 1.5.8

Original Wordfence record

MediumCVE-2023-0958

Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function

Published: July 27, 2023

Affected versions: *-3.2.3
Patched versions: 3.2.4

Affected versions: *-1.3.9
Patched versions: 1.4.0

Affected versions: *-3.5.7
Patched versions: 3.5.8

Affected versions: *-2.2.4
Patched versions: 2.2.5

Affected versions: *-1.2.7
Patched versions: 1.2.8

Affected versions: *-1.1.9
Patched versions: 1.2.0

Affected versions: *-1.1.3
Patched versions: 1.1.4

Affected versions: *-2.3.7
Patched versions: 2.3.8

Affected versions: *-2.8.1
Patched versions: 2.8.2

Affected versions: *-3.7
Patched versions: 3.8

Affected versions: *-1.5.7
Patched versions: 1.5.8

Original Wordfence record

MediumCVE-2023-1331

Redirection <= 1.1.4 - Cross-Site Request Forgery to Plugin Reset

Published: March 21, 2023

Affected versions: *-1.1.4
Patched versions: 1.1.5

Original Wordfence record

Medium

Redirect Redirection <= 1.1.4 - Cross-Site Request Forgery to Plugin De-Installation

Published: March 14, 2023

Affected versions: *-1.1.4
Patched versions: 1.1.5

Original Wordfence record

Medium

Redirect Redirection <= 1.1.3 - Missing Authorization in 'LoadTab' function

Published: February 22, 2023

Affected versions: *-1.1.3
Patched versions: 1.1.4

Original Wordfence record

MediumCVE-2023-1330

Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'addRedirect' function

Published: February 22, 2023

Affected versions: *-1.1.3
Patched versions: 1.1.4

Original Wordfence record

Medium

Redirect Redirection <= 1.1.3 - Missing Authorization in 'redirectionPageContent' function

Published: February 21, 2023

Affected versions: *-1.1.3
Patched versions: 1.1.4

Original Wordfence record

Highest-Severity Records

MediumCVE-2023-1331

Redirection <= 1.1.4 - Cross-Site Request Forgery to Plugin Reset

Published: March 21, 2023

Affected versions: *-1.1.4
Patched versions: 1.1.5

Original Wordfence record

Medium

Redirect Redirection <= 1.1.4 - Cross-Site Request Forgery to Plugin De-Installation

Published: March 14, 2023

Affected versions: *-1.1.4
Patched versions: 1.1.5

Original Wordfence record

Medium

Redirect Redirection <= 1.1.3 - Missing Authorization in 'loadRedirectSettings' function

Published: February 21, 2023

Affected versions: *-1.1.3
Patched versions: 1.1.4

Original Wordfence record

Medium

Redirect Redirection <= 1.1.3 - Missing Authorization in 'redirectionPageContent' function

Published: February 21, 2023

Affected versions: *-1.1.3
Patched versions: 1.1.4

Original Wordfence record

Medium

Redirect Redirection <= 1.1.3 - Missing Authorization in 'addRedirect' function

Published: February 21, 2023

Affected versions: *-1.1.3
Patched versions: 1.1.4

Original Wordfence record

Medium

Redirect Redirection <= 1.1.3 - Missing Authorization in 'deleteRedirect' function

Published: February 21, 2023

Affected versions: *-1.1.3
Patched versions: 1.1.4

Original Wordfence record

Medium

Redirect Redirection <= 1.1.3 - Cross-Site Request Forgery via 'SaveSettings' function

Published: February 21, 2023

Affected versions: *-1.1.3
Patched versions: 1.1.4

Original Wordfence record

Medium

Redirect Redirection <= 1.1.3 - Missing Authorization in 'SaveSettings' function

Published: February 21, 2023

Affected versions: *-1.1.3
Patched versions: 1.1.4

Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

WordPress Malware Removal WordPress Security Maintenance Contact 3Zero Digital

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory