Description
WordPress Plugin Redirect 404 Error Page to Homepage or Custom Page with Logs is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. WordPress Plugin Redirect 404 Error Page to Homepage or Custom Page with Logs version 1.7.8 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.7.9 or latest
References
Related Vulnerabilities
RubyGems Improper Authentication Vulnerability (CVE-2022-36073)
Jenkins Missing Authorization Vulnerability (CVE-2026-53438)
WebLogic CVE-2020-14589 Vulnerability (CVE-2020-14589)
WordPress Plugin Catch Themes Demo Import Remote Code Execution (2.1)
Dot CMS Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-3187)