• I’ve got a client that uses this plugin and today we noticed that their live site was redirecting off to various adult sites.

    It turned out that a wildcard redirect had been added to this plugin. Since only myself and the client have a login for the admin panel, it would seem that someone was able to insert these redirects without logging in.

  • The topic ‘Security issue – 301’s added without logging in’ is closed to new replies.