WordPress Peter’s Login Redirect plugin version 2.9.0 suffers from cross site scripting and cross site request forgery vulnerabilities.