WordPress Plugin Vulnerabilities

404 Solution < 2.35.18 - Missing Authentication to Sensitive Information Exposure

Description

The 404 Solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.35.17 via the export feature. This makes it possible for unauthenticated attackers to extract sensitive data such as redirects including GET parameters which may reveal sensitive information.

Affects Plugins

Plugin icon
404-solution
Fixed in 2.35.18

References

CVE
CVE-2024-11094
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/d738be73-2573-4fb8-b6f0-768a08628265

Miscellaneous

Original Researcher
Max Boll (_b0lli)
Verified
No
WPVDB ID
f0f39dc7-8b23-4441-8c53-35d431d6fc8d

Timeline

Publicly Published
2024-11-15 (about 1 year ago)
Added
2024-11-18 (about 1 year ago)
Last Updated
2024-11-18 (about 1 year ago)

Other

Published
Title
Published
2014-08-01
Title
Acumbamail 1.0.4 - acumbamail.class.php callAPI() Function MitM Information Disclosure
Published
2020-04-22
Title
Advanced Woo Search < 2.00 - SQL query leak in ajax search
Published
2014-08-01
Title
NextGEN Gallery 2.0.0 - Directory Traversal
Published
2025-10-14
Title
Binary MLM Plan < 5.0 - Unauthenticated Limited Privilege Escalation
Published
2023-02-03
Title
User Activity <= 1.0.1 - IP Spoofing