Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Clogica Component: All 404 Redirect To Homepage Clear all filters
TI-2021-06618 CVE-2021-24326 · GHSA-8fv5-7m8g-42cx

All 404 Redirect to Homepage < 1.21 - Authenticated Reflected Cross-Site Scripting (XSS)

Priority LOW 25

The tab parameter of the settings page of the All 404 Redirect to Homepage WordPress plugin before 1.21 was vulnerable to an authenticated reflected Cross-Site Scripting (XSS) issue as user input was not properly sanitis…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0062 Published 2021-05-17 Fixed in 1.21 CWE-79
TI-2021-06616 CVE-2021-24324 · GHSA-x587-fjx5-36pw

404 SEO Redirection <= 1.3 - CSRF to Stored Cross-Site Scripting (XSS)

Priority LOW 30

The 404 SEO Redirection WordPress plugin through 1.3 is lacking CSRF checks in all its settings, allowing attackers to make a logged in user change the plugin's settings.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0056 Published 2021-05-17 No fix listed CWE-352