CVE-2021-4338

The 404 to 301 plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the open_redirect & save_redirect functions in versions up to, and including, 3.0.7. This makes it possible for authenticated attackers to view, create and edit redirections.

• CWE-284
• CWE-862

• https://blog.nintechnet.com/broken-access-control-vulnerability-fixed-in-wordpress-404-to-301-plugin/Exploit
• https://plugins.trac.wordpress.org/changeset/2546695/404-to-301Patch
• https://wpscan.com/vulnerability/9f147107-bc5a-4a01-9979-cd9e16061f12Third Party Advisory
• https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-404-to-301-redirect-log-and-notify-404-errors-security-bypass-3-0-7/Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/05d6b27f-b1e5-4bb8-b7db-f8295a5e0d5b?source=cveThird Party Advisory
• https://blog.nintechnet.com/broken-access-control-vulnerability-fixed-in-wordpress-404-to-301-plugin/Exploit
• https://plugins.trac.wordpress.org/changeset/2546695/404-to-301Patch
• https://wpscan.com/vulnerability/9f147107-bc5a-4a01-9979-cd9e16061f12Third Party Advisory
• https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-404-to-301-redirect-log-and-notify-404-errors-security-bypass-3-0-7/Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/05d6b27f-b1e5-4bb8-b7db-f8295a5e0d5b?source=cveThird Party Advisory

Published

Jun 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43359Sunnet eHRD has broken access control vulnerability, which a…8.8
• CVE-2021-4336A vulnerability was found in ITRS Group monitor-ninja up to …9.8
• CVE-2021-43360Sunnet eHRD e-mail delivery task schedule’s serialization fu…8.8
• CVE-2021-43361Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2021-43362Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2021-4337Sixteen XforWooCommerce Add-On Plugins for WordPress are vul…8.8
• CVE-2021-43388Unisys Cargo Mobile Application before 1.2.29 uses cleartext…7.5
• CVE-2021-43389An issue was discovered in the Linux kernel before 5.14.15. …5.5
• CVE-2021-4339The uListing plugin for WordPress is vulnerable to authoriza…5.3
• CVE-2021-43390An Out-of-Bounds Write vulnerability exists when reading a D…7.8
• CVE-2021-43391An Out-of-Bounds Read vulnerability exists when reading a DX…7.8
• CVE-2021-43392STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN…6.2