What is CVE-2015-1580?

CVE-2015-1580 is a vulnerability in Redirection Project, classified under Cross-Site Request Forgery (CSRF). Published 2015-02-11.

Is CVE-2015-1580 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

CSRF in Redirection Project

CVE-2015-1580

Multiple cross-site request forgery (CSRF) vulnerabilities in the Redirection Page plugin 1.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings or conduct cross-site scripting (XSS) attacks via the (2) source or (3) redir parameter in an add action in the redirection-page to wp-admin/options-general.php.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.010 (59.3th percentile) — read the EPSS interpretation.

Affected products

Redirection_project Redirection — versions 1.2
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

Public proof-of-concept exploits

References

cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2015-1580?: CVE-2015-1580 is a vulnerability in Redirection Project, classified under Cross-Site Request Forgery (CSRF). Published 2015-02-11.
Is CVE-2015-1580 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.