CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-4338

The 404 to 301 plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the open_redirect & save_redirect functions in versions up to, and including, 3.0.7. This makes it possible for authenticated attackers to view, create and edit redirections.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 30.1%

CVSS Severity

CVSS v3 Score 6.4

References

Products affected by CVE-2021-4338

Duckdev » 404 To 301 » Version: N/A

cpe:2.3:a:duckdev:404_to_301:-
Duckdev » 404 To 301 » Version: 1.0.0

cpe:2.3:a:duckdev:404_to_301:1.0.0
Duckdev » 404 To 301 » Version: 1.0.1

cpe:2.3:a:duckdev:404_to_301:1.0.1
Duckdev » 404 To 301 » Version: 1.0.3

cpe:2.3:a:duckdev:404_to_301:1.0.3
Duckdev » 404 To 301 » Version: 1.0.4

cpe:2.3:a:duckdev:404_to_301:1.0.4
Duckdev » 404 To 301 » Version: 1.0.5

cpe:2.3:a:duckdev:404_to_301:1.0.5
Duckdev » 404 To 301 » Version: 1.0.6

cpe:2.3:a:duckdev:404_to_301:1.0.6
Duckdev » 404 To 301 » Version: 1.0.7

cpe:2.3:a:duckdev:404_to_301:1.0.7
Duckdev » 404 To 301 » Version: 1.0.8

cpe:2.3:a:duckdev:404_to_301:1.0.8
Duckdev » 404 To 301 » Version: 2.0.1

cpe:2.3:a:duckdev:404_to_301:2.0.1
Duckdev » 404 To 301 » Version: 2.0.2

cpe:2.3:a:duckdev:404_to_301:2.0.2
Duckdev » 404 To 301 » Version: 2.0.3

cpe:2.3:a:duckdev:404_to_301:2.0.3
Duckdev » 404 To 301 » Version: 2.0.4

cpe:2.3:a:duckdev:404_to_301:2.0.4
Duckdev » 404 To 301 » Version: 2.0.5

cpe:2.3:a:duckdev:404_to_301:2.0.5
Duckdev » 404 To 301 » Version: 2.0.6

cpe:2.3:a:duckdev:404_to_301:2.0.6
Duckdev » 404 To 301 » Version: 2.0.7

cpe:2.3:a:duckdev:404_to_301:2.0.7
Duckdev » 404 To 301 » Version: 2.0.8

cpe:2.3:a:duckdev:404_to_301:2.0.8
Duckdev » 404 To 301 » Version: 2.0.9

cpe:2.3:a:duckdev:404_to_301:2.0.9
Duckdev » 404 To 301 » Version: 2.1.0

cpe:2.3:a:duckdev:404_to_301:2.1.0
Duckdev » 404 To 301 » Version: 2.1.3

cpe:2.3:a:duckdev:404_to_301:2.1.3
Duckdev » 404 To 301 » Version: 2.1.4

cpe:2.3:a:duckdev:404_to_301:2.1.4
Duckdev » 404 To 301 » Version: 2.1.5

cpe:2.3:a:duckdev:404_to_301:2.1.5
Duckdev » 404 To 301 » Version: 2.1.6

cpe:2.3:a:duckdev:404_to_301:2.1.6
Duckdev » 404 To 301 » Version: 2.1.7

cpe:2.3:a:duckdev:404_to_301:2.1.7
Duckdev » 404 To 301 » Version: 2.2.2

cpe:2.3:a:duckdev:404_to_301:2.2.2
Duckdev » 404 To 301 » Version: 2.2.4

cpe:2.3:a:duckdev:404_to_301:2.2.4
Duckdev » 404 To 301 » Version: 2.2.5

cpe:2.3:a:duckdev:404_to_301:2.2.5
Duckdev » 404 To 301 » Version: 2.2.6

cpe:2.3:a:duckdev:404_to_301:2.2.6
Duckdev » 404 To 301 » Version: 2.2.7

cpe:2.3:a:duckdev:404_to_301:2.2.7
Duckdev » 404 To 301 » Version: 2.2.8

cpe:2.3:a:duckdev:404_to_301:2.2.8
Duckdev » 404 To 301 » Version: 2.2.9

cpe:2.3:a:duckdev:404_to_301:2.2.9
Duckdev » 404 To 301 » Version: 2.3.0

cpe:2.3:a:duckdev:404_to_301:2.3.0
Duckdev » 404 To 301 » Version: 2.3.1

cpe:2.3:a:duckdev:404_to_301:2.3.1
Duckdev » 404 To 301 » Version: 2.3.3

cpe:2.3:a:duckdev:404_to_301:2.3.3
Duckdev » 404 To 301 » Version: 3.0.0

cpe:2.3:a:duckdev:404_to_301:3.0.0
Duckdev » 404 To 301 » Version: 3.0.0.1

cpe:2.3:a:duckdev:404_to_301:3.0.0.1
Duckdev » 404 To 301 » Version: 3.0.1

cpe:2.3:a:duckdev:404_to_301:3.0.1
Duckdev » 404 To 301 » Version: 3.0.2

cpe:2.3:a:duckdev:404_to_301:3.0.2
Duckdev » 404 To 301 » Version: 3.0.3

cpe:2.3:a:duckdev:404_to_301:3.0.3
Duckdev » 404 To 301 » Version: 3.0.4

cpe:2.3:a:duckdev:404_to_301:3.0.4
Duckdev » 404 To 301 » Version: 3.0.5

cpe:2.3:a:duckdev:404_to_301:3.0.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-4338

Products

Pricing

Contact Us