The 404 to 301 – Redirect, Log and Notify 404 Errors WordPress plugin before 3.0.9 does not have CSRF check in place when cleaning the logs, which could allow attacker to make a logged in admin delete all of them via a C…
CVSS 3.1MEDIUM 6.5·Network·No auth·User interaction·EPSS 0.00549·Published 2021-11-08·Fixed in 3.0.9CWE-352