PT-2023-12441 · WordPress · 404 To 301

Jerome Bruandet · Published 2023-06-07 · Updated 2023-06-13 · CVE-2021-4338

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions 404 to 301 plugin for WordPress versions up to, and including, 3.0.7

Description The issue is related to authorization bypass due to missing capability checks on the open redirect and save redirect functions. This allows authenticated attackers to view, create, and edit redirections.

Recommendations For versions up to, and including, 3.0.7, update to a version higher than 3.0.7 to resolve the issue. As a temporary workaround, consider restricting access to the open redirect and save redirect functions to prevent exploitation.

Exploit

Fix

Improper Access Control

Missing Authorization

Weakness Enumeration

CWE-284

CWE-862

Related Identifiers

CVE-2021-4338

Affected Products

404 To 301

References · 7

• 🔥 https://blog.nintechnet.com/broken-access-control-vulnerability-fixed-in-wordpress-404-to-301-plugin · Exploit
• https://osv.dev/vulnerability/CVE-2021-4338 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-4338 · Security Note
• https://plugins.trac.wordpress.org/changeset/2546695/404-to-301 · Patch
• https://wordfence.com/threat-intel/vulnerabilities/id/05d6b27f-b1e5-4bb8-b7db-f8295a5e0d5b?source=cve · Note
• https://wpscan.com/vulnerability/9f147107-bc5a-4a01-9979-cd9e16061f12 · Note
• https://acunetix.com/vulnerabilities/web/wordpress-plugin-404-to-301-redirect-log-and-notify-404-errors-security-bypass-3-0-7 · Note