The 404 SEO Redirection WordPress plugin up to and including 1.3 is lacking CSRF checks in all its settings, allowing malicious users to make a logged in user change the plugin's settings. Due to the lack of sanitisation and escaping in some fields, it could also lead to Stored Cross-Site Scripting issues
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
clogica all 404 redirect to homepage |
Vulmon