TI-2015-07700 CVE-2015-9323 · GHSA-2mwg-58j6-vmp3
The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection.
Priority HIGH 72
The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection.
Duckdev
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Duckdev records in CISA KEVNo Duckdev vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records
TI-2021-03196 CVE-2021-4338 · GHSA-ph5r-wpp4-cgh6
404 to 301 <= 3.0.7 - Missing Authorization to Redirect Creation
Priority LOW 29
The 404 to 301 plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the open_redirect & save_redirect functions in versions up to, and including, 3.0.7.
TI-2024-08564 CVE-2024-9228 · GHSA-w4g5-wwhq-79mp
Loggedin – Limit Active Logins <= 1.3.1 - Reflected Cross-Site Scripting
Priority LOW 27
The Loggedin – Limit Active Logins plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.3.1.