CVE-2021-24847

Name of the Vulnerable Software and Affected Versions: SEO Redirection Plugin – 301 Redirect Manager WordPress plugin versions prior to 8.2

Description: The importFromRedirection AJAX action does not properly sanitise the offset parameter before using it in a SQL statement, leading to an SQL injection. This issue is available to any authenticated user when the redirection plugin is also installed.

Recommendations: For versions prior to 8.2, update to version 8.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the importFromRedirection AJAX action until a patch is available. Avoid using the offset parameter in the affected AJAX action until the issue is resolved.