PatchTheCVE404 to 301 vulnerabilities and fixes
Recent CVEs affecting 404 to 301, with upgrade or downgrade steps. 2 tracked.
Also searched as: 404to301.
404 to 301 has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-06-07. Highest priority: CVE-2021-4338 (score 40/100).
- CVE-2021-4338 MEDIUM 6.4 UPGRADE The 404 to 301 plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on
- CVE-2021-24766 MEDIUM 6.5 UPGRADE The 404 to 301 – Redirect, Log and Notify 404 Errors WordPress plugin before 3.0.9 does not have CSRF check in
FAQ
How do I fix 404 to 301 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is 404 to 301 being exploited right now?
None of the tracked 404 to 301 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which 404 to 301 CVE should I patch first?
CVE-2021-4338 currently ranks highest (40/100): The 404 to 301 plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on .