CVE · Medium

CVE-2024-11094 — 404 Solution [404-solution] < 2.35.18

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-11094 404 Solution [404-solution] < 2.35.18 Exposure of Data Element to Wrong Session Medium 5.3 < 2.35.18 2.35.18 2024-11-15

CVE-2024-11094

The 404 Solution plugin for WordPress contains a sensitive information exposure weakness in versions up to and including 2.35.17 that affects its export functionality. Attackers without authentication can exploit this feature to download data containing redirects along with their associated GET parameters, potentially exposing confidential details. While many sites may not be impacted by this exposure, those storing sensitive values in URL parameters could face information disclosure risks.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.