Approved changes feed: RSS · Atom

cpe:2.3:a:duckdev:404_to_301:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorDuckdev (aa7aa1bf-dbb8-5045-8e2d-fbf0d6073ee3)
Product404 To 301 (d71b36e3-e669-5282-8da6-383092feeff9)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-4338 vulnerable 2026-06-08 05:38:09.235044 404 to 301 <= 3.0.7 - Missing Authorization to Redirect Creation
MEDIUM (6.4)
The 404 to 301 plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the open_redirect & save_redirect functions in versions up to, and including, 3.0.7. This makes it possible for authenticated attackers to view, create and edit redirections.
Published: 2023-06-07T01:51:11.349Z
Updated: 2026-04-08T16:33:30.671Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-9323 vulnerable 2026-06-08 05:07:13.563953 Details available
The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection.
Published: 2019-08-16T20:12:59.000Z
Updated: 2024-08-06T08:43:42.698Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.