4 matches found
CVE-2024-1068
The 404 Solution WordPress plugin is vulnerable to SQL injection in versions prior to 2.35.8 . The root cause is the improper sanitization and escaping of a parameter before it is used in a SQL statement. This vulnerability is exploitable by high privilege users , such as administrators. Impact i...
CVE-2023-52146
CVE-2023-52146 : Affects WordPress plugin 404 Solution (up to version 2.33.0). Public details in connected docs indicate a vulnerability titled “Sensitive Information Exposure via Log File” within the 404 Solution plugin, leading to exposure of sensitive data via logs. The vulnerability has been ...
CVE-2023-50848
CVE-2023-50848 affects the 404 Solution WordPress plugin (
CVE-2024-11277
CVE-2024-11277 (404 Solution, WordPress) : The plugin is affected by a reflected Cross-Site Scripting (XSS) vulnerability via URLs in all versions up to 2.35.19. Exploitation requires a user to click a link, but does not require authentication. Root cause is insufficient input sanitization and ou...