Known vulnerabilities in Redirection

Redirection

25Reported vulnerabilities

5.4Highest CVSS score

1.3.0Latest version

100,000+Active installs

What to do now

Update Redirection to 1.1.5 or later. 25 of these have a fixed version available. Updating resolves them.

Plugin last updated: May 8, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
WF-7d500729-3b1a-4ece-81de-4c1f9afbf798	Medium 5.4	—	1.1.4 and earlier	`1.1.5`	March 14, 2023
WF-a7beb9b3-3e4e-4aa2-b174-ecd9307cb3d0	Medium 5.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-8250434a-2fad-4f44-9813-90e734d32d2e	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 22, 2023
WF-0bde3052-ae8e-4434-962a-88d3c8328a9c	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-140a6fd3-e446-44ea-94eb-9c8d12f7b7ed	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-1c22717f-494e-4f62-9691-ee5a3366a487	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-29333999-ffe3-4cd0-a537-be98168cb2ee	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-4c953a46-d2ae-41f7-a940-d23b011d9eca	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-53667fd6-0d12-400d-b3a1-7cee305a2bc2	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-5d1d012a-46cd-4c86-ac6f-993736a91acb	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-71caa071-d279-4807-88ad-a71673b9d17d	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-84d43356-274e-42d5-ac40-10a34effce8d	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-8b421330-dd3c-4af0-9f42-95430117eb9b	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-a7ec331c-51ea-466a-ab7b-4234df47114a	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-b2ec7d77-fe50-4bb2-a57b-6ee4246805f9	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-b57dd8e3-e3e1-4d6b-b9dd-b5a24c4886b4	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-d0d6f467-6e62-45ff-bf9d-4db5b1ed1dd2	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-d433a5b3-4661-4246-ae60-8a99633372ad	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-d4dacd15-85cc-41f5-830c-b02c85c798f9	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-dceca4ee-6587-4eaa-974e-a21e7a10b6e8	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-de69d597-b663-4c58-82e0-c90391fb8416	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-e29dac44-5c85-4f73-ae96-4bc0deca64f4	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-ef5f99ca-8a0d-4ec4-8b59-c0c4637dfbc3	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-f347a629-523e-4ec4-ad56-6ae9357dd7f5	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023
WF-fdd57b3b-bd0a-4b07-831e-72f2329b2577	Medium 4.3	—	1.1.3 and earlier	`1.1.4`	February 21, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.