CVE-2014-2598: Quick Page/post Redirect Project Quick Page/post Redirect

Medium severity, CVSS 6.8. EPSS: 3.5% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in the Quick Page/Post Redirect plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the quickppr_redirects[request][] parameter in the redirect-updates page to wp-admin/admin.php.

Affected products

• Quick Page/post Redirect Project Quick Page/post Redirect: up to and including 5.0.4

Published 2015-01-05. Last modified 2026-06-17.