CVE-2021-24766CWE-352
404 to 301 < 3.0.9 - Logs Deletion via CSRF
published November 8, 2021
What it is
The 404 to 301 – Redirect, Log and Notify 404 Errors WordPress plugin before 3.0.9 does not have CSRF check in place when cleaning the logs, which could allow attacker to make a logged in admin delete all of them via a CSRF attack
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00549 · 45.2th percentile
- Weakness
- CWE-352 · Cross-Site Request Forgery (CSRF)
- Published
- 2021-11-08T17:35Z
EPSS history
Timeline