Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-11094

404 Solution <= 2.35.17 - Missing Authentication to Sensitive Information Exposure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Wordfence

Description

The 404 Solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.35.17 via the export feature. This makes it possible for unauthenticated attackers to extract data such as redirects including GET parameters which may reveal sensitive information. On most sites this is unlikely to be the case.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

aaron13100 404 Solution

Default version status: unaffected

  • 0 to ≤ 2.35.17affected

References