CVE-2025-30557: 
WordPress vulnerability analysis and mitigation

A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the WordPress plugin Easy 301 Redirects, affecting versions up to 1.33. The vulnerability was reported by Nguyen Xuan Chien on February 28, 2025, and was publicly disclosed on March 24, 2025. The issue has been assigned CVE-2025-30557 and received a CVSS v3.1 score of 4.3 (Medium) (Patchstack).

The vulnerability is classified as CWE-352 (Cross-Site Request Forgery) and has been assigned a CVSS v3.1 Base Score of 4.3 with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. This indicates that the vulnerability is network-accessible, requires low attack complexity, needs no privileges, requires user interaction, and has a limited impact on integrity with no impact on confidentiality or availability (NVD).

The vulnerability could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. The severity is considered low, and the vulnerability is unlikely to be exploited in real-world scenarios (Patchstack).

As of March 24, 2025, no official fix has been released for this vulnerability. The issue affects Easy 301 Redirects plugin versions up to 1.33 (Patchstack).