CVE-2023-1331

The Redirection plugin for WordPress up to version 1.1.4 contains a cross-site request forgery vulnerability affecting the uninstall function that hooks into admin_post. An attacker can exploit this flaw by crafting a malicious request that, if clicked by an administrator, would allow them to deactivate and reset the plugin without proper authorization. The vulnerability stems from inadequate nonce validation mechanisms protecting the uninstall functionality.

Based on public CVE data (MITRE/NVD).