CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs allows SQL Injection.This issue affects Redirect 404 Error Page to Homepage or Custom Page with Logs: from n/a through 1.8.7.
Explanation of Vulnerability in Simple Terms
The Redirect 404 Error Page to Homepage or Custom Page with Logs plugin for WordPress contains a SQL injection vulnerability in versions up to 1.8.7. An attacker with high-level privileges can craft malicious input to execute arbitrary SQL queries, potentially reading sensitive database information. The vulnerability affects the plugin's core functionality and may impact site availability.
What an attacker can do
Read sensitive data from the site's database or degrade site performance through SQL injection.
Potential impact on your site
An admin account compromise could expose your database contents or cause the site to slow down or become unavailable.
Conditions required to exploit
Attacker must have high-level WordPress privileges (administrator or equivalent role).
Key dates
External resources
Related vulnerabilities
