CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
The 404 Solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.35.17 via the export feature. This makes it possible for unauthenticated attackers to extract data such as redirects including GET parameters which may reveal sensitive information. On most sites this is unlikely to be the case.
Explanation of Vulnerability in Simple Terms
The 404 Solution product through version 2.35.17 contains a data exposure vulnerability that allows unauthenticated attackers to read sensitive information over the network. No user interaction is required to exploit this issue. The vulnerability affects all versions from 0 through 2.35.17.
What an attacker can do
Read sensitive information from the application without authentication.
Potential impact on your site
Sensitive data may be exposed to unauthenticated attackers if the 404 Solution is installed and unpatched.
Conditions required to exploit
Network access to the affected application. No authentication or user interaction required.
Key dates
External resources
