Now officially on WordPress.org

CVE Database / CVE-2024-11094

CVE · Medium

CVE-2024-11094 — 404 Solution: Redirection and Page Suggestions [404-solution] < 2.35.18

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-11094 404 Solution: Redirection and Page Suggestions [404-solution] < 2.35.18 Exposure of Data Element to Wrong Session Medium 5.3 < 2.35.18 2.35.18 2024-11-15 —

CVE-2024-11094

The 404 Solution plugin for WordPress contains a sensitive information exposure weakness in versions up to and including 2.35.17 that affects its export functionality. Attackers without authentication can exploit this feature to download data containing redirects along with their associated GET parameters, potentially exposing confidential details. While many sites may not be impacted by this exposure, those storing sensitive values in URL parameters could face information disclosure risks.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings