CVE Database /
CVE-2021-24142
CVE · High
CVE-2021-24142 — 301 Redirects – Redirect Manager [eps-301-redirects] < 2.51
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2021-24142
|
301 Redirects – Redirect Manager [eps-301-redirects] < 2.51 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
High
7.2
|
< 2.51
|
2.51 |
2021-01-18 |
—
|
CVE-2021-24142
The 301 Redirects – Redirect Manager plugin before version 2.51 contains a SQL injection vulnerability in its CSV import functionality. When processing the "Redirect From" column during CSV file uploads, the plugin fails to properly sanitize user input, allowing administrators and other high-privilege users to execute arbitrary SQL queries. The vulnerability was confirmed to affect version 2.45 and has been resolved starting with version 2.51.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings