vulnerability
WordPress Plugin: redirect-404-error-page-to-homepage-or-custom-page: CVE-2021-24767: Cross-Site Request Forgery (CSRF)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | Oct 6, 2021 | May 15, 2025 | May 15, 2025 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Oct 6, 2021
Added
May 15, 2025
Modified
May 15, 2025
Description
The Redirect 404 Error Page to Homepage or Custom Page with Logs WordPress plugin before 1.7.9 does not check for CSRF when deleting logs, which could allow attacker to make a logged in admin delete them via a CSRF attack
Solution
redirect-404-error-page-to-homepage-or-custom-page-plugin-cve-2021-24767
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.