WP Manifestindependent plugin directory
manifest / seo / wordpress-easy-301-redirects

Wordpress Easy 301 Redirects WP RegistryHigh-severity findings · 1 findingOpen the reportC-

Modern and Easy 301 redirects for Wordpress. Intend to replace Simple 301 Redirects

by Finaldream.de · github.com/finaldream/wordpress-easy-301-redirects · website

★ 0stars
552composer installs
1.0.7latest · 3 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/finaldream/wordpress-easy-301-redirects/archive/refs/heads/master.zip

On Packagist as finaldream/wordpress-easy-301-redirects:

composer require finaldream/wordpress-easy-301-redirects
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/finaldream/wordpress-easy-301-redirects ↗

Modern and Easy 301 redirects for Wordpress. Intend to replace Simple 301 Redirects plugin

Use cases

  • Create HTTP 301 redirections from your Wordpress server routes, directly in the wp-admin
  • Use a modern GUI for better management of your redirections.

Features

  • Wildcard is always active! End your request route with an * and it will be applied
  • Easely navigate, search and sort through your redirections list.
  • Export your redirections to a CSV file.

Installation

Install as a regular plugin or using wpackagist

Development

  • GUI is based on React. Clone the repo and run yarn to install all dependencies.
  • You will need a Wordpress instalation to test your development. Include the repo dir into the wp-content/plugins/ directory of it.

Releases

2 releases.

Tag
Published
1.0.7 latest
Aug 2, 2023 3 years ago
1.0.6
Jun 16, 2022 4 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

C- grade

Security

Wordpress Easy 301 Redirects 1.0.7 · audited by WP Registry

High-severity findings.

1 high
Audited release
1.0.7
Findings
1
Worst severity
high
Content hash
b8aa6bd546031f9114d46a00…

Findings

  • high CSRF: saveRedirects AJAX lacks nonce verification

    csrf

    wp_ajax_saveRedirects checks current_user_can('manage_options') but never verifies a nonce or referer. An attacker can lure a logged-in administrator to submit a crafted request (cross-origin or via a malicious page while the admin session is active) that replaces easy_301_redirects options, enabling site-wide open redirects to phishing/malware URLs.

    wordpress-easy-301-redirects.php:109-158

    Recommendation

    Create a nonce with wp_create_nonce, pass it to the React admin app, and verify with check_ajax_referer / wp_verify_nonce before updating options. Reject mismatched Content-Type origins as defense in depth.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →