PT-2021-16264 · WordPress · Wpvibes Redirect 404 Error Page To Homepage/Custom Page With Logs

Apple502J · Published 2021-11-08 · Updated 2026-01-23 · CVE-2021-24767

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: The Redirect 404 Error Page to Homepage or Custom Page with Logs WordPress plugin versions prior to 1.7.9

Description: The issue concerns a lack of CSRF check when deleting logs, which could allow an attacker to make a logged-in admin delete them via a CSRF attack.

Recommendations: For versions prior to 1.7.9, update to version 1.7.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the log deletion functionality to minimize the risk of exploitation.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2021-24767

Affected Products

Wpvibes Redirect 404 Error Page To Homepage/Custom Page With Logs

References · 5

• 🔥 https://wpscan.com/vulnerability/0b35ad4a-3d94-49b1-a98d-07acf8dd4962 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-24767 · Security Note
• https://osv.dev/vulnerability/CVE-2021-24767 · Vendor Advisory
• https://t.me/cvenotify/23140 · Telegram Post
• https://t.me/cveNotify/149748 · Telegram Post