CVE-2026-7561

Name of the Vulnerable Software and Affected Versions Tm – WordPress Redirection versions prior to 1.3

Description This issue involves Cross-Site Request Forgery (CSRF), a flaw where an attacker tricks a victim into performing actions they did not intend to do. The problem stems from missing or incorrect nonce validation—a security token used to ensure requests are intentional—on a function. This allows unauthenticated attackers to update settings and inject malicious web scripts by tricking a site administrator into clicking a link.

Recommendations Update to a version later than 1.2.