Security Advisory

CVE-2021-4338

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-06-07 01:51:11

Last updated 2026-04-08 16:33:30

Assigner Wordfence

State PUBLISHED

Description

The 404 to 301 plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the open_redirect & save_redirect functions in versions up to, and including, 3.0.7. This makes it possible for authenticated attackers to view, create and edit redirections.

← Browse all CVEs View on cve.org ↗