CVE-2026-13703
Received Received - Intake

SEO Redirection Plugin Authenticated Information Disclosure

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: WPScan

Description
The SEO Redirection Plugin WordPress plugin before 9.19 does not perform a capability check in one of its authenticated AJAX actions, allowing any logged-in user such as a subscriber to read the site's configured 301 redirect rules, including their source and destination URLs.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
CVE-2026-13703
EUVD
EUVD-2026-53737

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
seo_redirection_plugin seo_redirection_plugin to 9.19 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the SEO Redirection Plugin for WordPress. It allows any logged-in user, even those with basic subscriber roles, to view the site's configured 301 redirect rules through an unauthenticated AJAX action. This exposes sensitive URL paths including source and destination addresses.

Detection Guidance

Check if the SEO Redirection Plugin version is below 9.19 by inspecting the plugin files or WordPress admin panel. Log in as a subscriber and attempt to access the vulnerable AJAX action to view redirect rules.

Impact Analysis

Attackers could exploit this to gather internal URL structures, potentially revealing sensitive paths or redirect configurations. This information might be used for further attacks like phishing or unauthorized access attempts.

Mitigation Strategies

Update the SEO Redirection Plugin to version 9.19 or later immediately. If updating is not possible, consider disabling the plugin until an update is available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-13703. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart