Duckdev

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Duckdev records in CISA KEV

No Duckdev vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

404 To 301 2 records HIGH Loggedin 1 record LOW

Records

2 records in 404 To 301 · all components

TI-2015-07700 CVE-2015-9323 · GHSA-2mwg-58j6-vmp3

The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection.

HIGH 72

The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.46125 Published 2019-08-16 No fix listed CWE-89

TI-2021-03196 CVE-2021-4338 · GHSA-ph5r-wpp4-cgh6

404 to 301 <= 3.0.7 - Missing Authorization to Redirect Creation

LOW 29

The 404 to 301 plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the open_redirect & save_redirect functions in versions up to, and including, 3.0.7.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00617 Published 2023-06-07 No fix listed CWE-284

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0