Known vulnerabilities in 301 Redirects 2.2.3

Vendor: WebFactory Ltd
Software: 301 Redirects
Version: 2.2.3
Software CPE: cpe:2.3:a:webfactory:eps-301-redirects:*:*:*:*:*:wordpress:*:*
Website: https://profiles.wordpress.org/webfactory/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting 301 Redirects version 2.2.3 301 Redirects 2.2.3 is affected by 3 vulnerabilities: 1 medium, 2 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU23761 - Cross-Site Request Forgery (CSRF)
CVE-2019-19915		 CWE-352 Low
No
No
 2.45 20.12.2019 SB2019122006
#VU23760 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-19915		 CWE-79 Low
No
No
 2.45 20.12.2019 SB2019122006
#VU23759 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-19915		 CWE-601 Medium
No
No
 2.45 20.12.2019 SB2019122006