Vulnerabilities > CVE-2021-24766 - Unspecified vulnerability in 404 to 301 Project 404 to 301

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
404-to-301-project

Summary

The 404 to 301 – Redirect, Log and Notify 404 Errors WordPress plugin before 3.0.9 does not have CSRF check in place when cleaning the logs, which could allow attacker to make a logged in admin delete all of them via a CSRF attack

Vulnerable Configurations

Part Description Count
Application
404_To_301_Project
1