CVE-2021-24766
MEDIUM
6.5
CVSS 3.1
Description
The 404 to 301 – Redirect, Log and Notify 404 Errors WordPress plugin before 3.0.9 does not have CSRF check in place when cleaning the logs, which could allow attacker to make a logged in admin delete all of them via a CSRF attack
Affected WordPress components
-
404 to 301 – Redirect Manager, 301 Redirection, 404 Error Logs & 404 Monitoring Plugin · 404-to-301From 3.0.9 (including) to 3.0.9 (excluding)View on WordPress.org
A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.
Affected products and versions
- Unknown 404 to 301 – Redirect, Log and Notify 404 Errors — From 3.0.9 (including) to 3.0.9 (excluding)
- 404_to_301_project 404_to_301 — Before 3.0.9
References
- wpscan.com https://wpscan.com/vulnerability/cc13db1e-5f7f-49b2-81da-f913cfe70543 Exploit, Third Party Advisory
- nvd.nist.gov Official NVD record