CVE-2014-2598

Cross-site request forgery (CSRF) vulnerability in the Quick Page/Post Redirect plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the quickppr_redirects[request][] parameter in the redirect-updates page to wp-admin/admin.php.

• CWE-352

• http://osvdb.org/show/osvdb/105707
• http://osvdb.org/show/osvdb/105708
• http://packetstormsecurity.com/files/126127Exploit
• http://seclists.org/fulldisclosure/2014/Apr/171Exploit
• http://secunia.com/advisories/57883
• http://www.exploit-db.com/exploits/32867Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/92528
• https://security.dxw.com/advisories/csrf-and-stored-xss-in-quick-pagepost-redirect-plugin/Exploit
• https://wordpress.org/plugins/quick-pagepost-redirect-plugin/changelog/Patch, Vendor Advisory
• http://osvdb.org/show/osvdb/105707
• http://osvdb.org/show/osvdb/105708
• http://packetstormsecurity.com/files/126127Exploit
• http://seclists.org/fulldisclosure/2014/Apr/171Exploit
• http://secunia.com/advisories/57883
• http://www.exploit-db.com/exploits/32867Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/92528
• https://security.dxw.com/advisories/csrf-and-stored-xss-in-quick-pagepost-redirect-plugin/Exploit
• https://wordpress.org/plugins/quick-pagepost-redirect-plugin/changelog/Patch, Vendor Advisory

Published

Jan 5, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-2590The web management interface in Siemens RuggedCom ROS before…
• CVE-2014-2591Untrusted search path vulnerability in BMC Patrol for AIX 3.…
• CVE-2014-2592Unrestricted file upload vulnerability in Aruba Web Manageme…
• CVE-2014-2593The management console in Aruba Networks ClearPass Policy Ma…
• CVE-2014-2595Barracuda Web Application Firewall (WAF) 7.8.1.013 allows re…9.8
• CVE-2014-2597PCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users …
• CVE-2014-2599The HVMOP_set_mem_access HVM control operations in Xen 4.1.x…
• CVE-2014-2600Unspecified vulnerability in HP IceWall Identity Manager 4.0…
• CVE-2014-2601The server in HP Integrated Lights-Out 2 (aka iLO 2) 2.23 an…
• CVE-2014-2602Unspecified vulnerability in HP OneView 1.0 and 1.01 allows …
• CVE-2014-2603Unspecified vulnerability on HP 8/20q switches, SN6000 switc…
• CVE-2014-2604Unspecified vulnerability in HP IceWall SSO 10.0 Dfw and Ice…