CVE-2021-24766
Assigner: WPScan
Published: 2021-11-08T17:35:17
State: PUBLISHED
affected: product: 404 to 301 – Redirect, Log and Notify 404 Errors
vendor: Unknown
versions: lessThan: 3.0.9
status: affected
version: 3.0.9
versionType: custom
credits: value: apple502j
descriptions: value: The 404 to 301 – Redirect, Log and Notify 404 Errors WordPress plugin before 3.0.9 does not have CSRF check in place when cleaning the logs, which could allow attacker to make a logged in admin delete all of them via a CSRF attack
problemTypes: descriptions: cweId: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
type: CWE
source: discovery: EXTERNAL
title: 404 to 301 < 3.0.9 - Logs Deletion via CSRF
x_generator: WPScan CVE Generator