CVE-2015-9323

The CVE-2015-9323 entry corresponds to a vulnerability in the WordPress plugin 404-to-301 (Redirect, Log and Notify 404 Errors). Affected versions are before 2.0.3, with an Authenticated Blind SQL Injection vulnerability in the plugin’s code path. Exploitation is described as authenticated (requi...

CVE-2021-4338

The CVE-2021-4338 entry concerns the WordPress 404 to 301 plugin. It describes an authorization bypass caused by missing capability checks on the open_redirect and save_redirect functions in versions up to and including 3.0.7. The vulnerability allows authenticated attackers to view, create, and ...