CVE-2024-11094 MEDIUM

CVE-2024-11094: 404 Solution <= 2.35.17 - Missing Authentication to Sensitive Information Exposure

Vendor Aaron13100
Product 404 Solution
Weakness CWE-488
Published November 16, 2024
Last update April 8, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

The 404 Solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.35.17 via the export feature. This makes it possible for unauthenticated attackers to extract data such as redirects including GET parameters which may reveal sensitive information. On most sites this is unlikely to be the case.

Key dates

02Disclosure timeline

November 16, 2024 CVE published
April 8, 2026 Record updated