CVE Database /
CVE-2024-32559
CVE · High
CVE-2024-32559 — WP 404 Auto Redirect to Similar Post [wp-404-auto-redirect-to-similar-post] < 1.0.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-32559
|
WP 404 Auto Redirect to Similar Post [wp-404-auto-redirect-to-similar-post] < 1.0.5 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
High
7.1
|
< 1.0.5
|
1.0.5 |
2024-04-16 |
—
|
CVE-2024-32559
The WP 404 Auto Redirect to Similar Post plugin contains a reflected cross-site scripting vulnerability affecting versions 1.0.4 and earlier, where the URI parameter is not properly sanitized or escaped. An unauthenticated attacker can inject malicious scripts that will execute in a user's browser if they click a crafted link, provided the plugin's Debug Mode setting is enabled. This vulnerability allows attackers to perform actions on behalf of users or steal sensitive information through script injection.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings