Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: webfactory Component: 301 Redirects Clear all filters
TI-2021-06434 CVE-2021-24142 · GHSA-8w3p-34v2-ghhr

301 Redirects - Easy Redirect Manager < 2.51 - Authenticated SQL Injection

Priority LOW 34

Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its "Redirect From" column when importing a CSV file, allowing high privilege users to perform SQL i…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01238 Published 2021-03-18 Fixed in 2.51 CWE-89
TI-2019-14361 CVE-2019-19915 · GHSA-r8f7-ff3w-94hq

The "301 Redirects - Easy Redirect Manager" plugin before 2.45 for WordPress allows users…

Priority MEDIUM 40

The "301 Redirects - Easy Redirect Manager" plugin before 2.45 for WordPress allows users (with subscriber or greater access) to modify, delete, or inject redirect rules, and exploit XSS, with the /admin-ajax.php?action=…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00859 Published 2019-12-19 No fix listed CWE-352