Description
WordPress Plugin 404 to 301-Redirect, Log and Notify 404 Errors is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently view, create, or edit redirections. WordPress Plugin 404 to 301-Redirect, Log and Notify 404 Errors version 3.0.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.0.8 or latest
References
Related Vulnerabilities
WordPress Plugin Side Cart Woocommerce (Ajax) Cross-Site Request Forgery (2.0)
WordPress Plugin LearnDash LMS SQL Injection (3.1.5)
Roundcube Cross-site Scripting (XSS) Vulnerability (CVE-2015-1433)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2358)
Oracle Database Server CVE-2011-3512 Vulnerability (CVE-2011-3512)