CVE-2024-11094

MEDIUM5.3

404 Solution <= 2.35.17 - Missing Authentication to Sensitive Information Exposure

Published Nov 16, 2024

Modified 1 years ago

Details

The 404 Solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.35.17 via the export feature. This makes it possible for unauthenticated attackers to extract sensitive data such as redirects including GET parameters which may reveal sensitive information.

References

WEB

https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3188844%40404-solution%2Ftrunk&old=3169186%40404-solution%2Ftrunk&sfp_email=&sfph_mail=

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2024-11094

WEB

https://www.wordfence.com/threat-intel/vulnerabilities/id/d738be73-2573-4fb8-b6f0-768a08628265?source=cve

CVSS Analysis

CVSS v3.1

5.3

Exploitability

Attack Vector