Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Ajexperience Clear all filters
TI-2024-10447 CVE-2024-11277 · GHSA-8w9g-r3q7-57v4

404 Solution <= 2.35.19 - Reflected Cross-Site Scripting

Priority LOW 27

The 404 Solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, and including, 2.35.19 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00331 Published 2024-11-20 No fix listed CWE-79
TI-2024-00989 CVE-2024-1068 · GHSA-jjxf-7hh9-8j8m

404 Solution < 2.35.8 - Admin+ SQL Injection

Priority HIGH 67

The 404 Solution WordPress plugin before 2.35.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admins.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00756 Published 2024-03-11 Fixed in 2.35.8 CWE-89
TI-2023-27753 CVE-2023-50848 · GHSA-gm9h-hh76-w62w

WordPress 404 Solution Plugin <= 2.34.0 is vulnerable to SQL Injection

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aaron J 404 Solution.This issue affects 404 Solution: from n/a through 2.34.0.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00541 Published 2023-12-28 No fix listed CWE-89