CVE-2024-0509

🗓️ 05 Feb 2024 21:21:47Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 33 Views

The WP 404 Auto Redirect to Similar Post plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘request’ parameter in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-0509	5 Feb 202423:31	–	circl
CNNVD	WordPress plugin WP 404 Auto Redirect to Similar Post Security Vulnerability	5 Feb 202400:00	–	cnnvd
Cvelist	CVE-2024-0509 WP 404 Auto Redirect to Similar Post <= 1.0.3 - Reflected Cross-Site Scripting via request	5 Feb 202421:21	–	cvelist
NVD	CVE-2024-0509	5 Feb 202422:16	–	nvd
Patchstack	WordPress WP 404 Auto Redirect to Similar Post Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)	6 Feb 202400:00	–	patchstack
Prion	Cross site scripting	5 Feb 202422:16	–	prion
Positive Technologies	PT-2024-15625 · WordPress · Wp 404 Auto Redirect To Similar Post	5 Feb 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-0509	23 May 202507:25	–	redhatcve
Vulnrichment	CVE-2024-0509 WP 404 Auto Redirect to Similar Post <= 1.0.3 - Reflected Cross-Site Scripting via request	5 Feb 202421:21	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (February 5, 2024 to February 11, 2024)	15 Feb 202416:21	–	wordfence

NVD

Vulners

Node

hwk wp_404_auto_redirect_to_similar_postRange≤1.0.3wordpress

[
  {
    "vendor": "hwk-fr",
    "product": "WP 404 Auto Redirect to Similar Post",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.0.3",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3031134/wp-404-auto-redirect-to-similar-post/trunk/includes/ajax.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/6eef5549-3f89-4d6f-8c4e-6e4ee6082042

08 Apr 2026 18:18Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.1

EPSS0.33697

SSVC

CWE-79

cve-2024-0509 wp wordpress plugin security vulnerability xss nvd