Beveiligingsadvies

CVE-2021-4338

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-06-07 01:51:11
Laatst bijgewerkt 2026-04-08 16:33:30
Toegewezen door Wordfence
CVSS-score 6.4
Status PUBLISHED

Beschrijving

The 404 to 301 plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the open_redirect & save_redirect functions in versions up to, and including, 3.0.7. This makes it possible for authenticated attackers to view, create and edit redirections.