Duckdev - vulnerabilities (CVEs)

3 CVEs in 2 products, 0 in the last 30 days, newest from 2024-10-01.

Products

• 404 To 301 - 2 CVEs
• Loggedin - 1 CVEs

Newest CVEs of Duckdev

• CVE-2024-9228 - CVSS 6.1 (medium), 2024-10-01: The Loggedin – Limit Active Logins plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate…
• CVE-2021-4338 - CVSS 6.4 (medium), 2023-06-07: The 404 to 301 plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the open_redirect & save_redirect functions in…
• CVE-2015-9323 - CVSS 9.8 (critical), 2019-08-16: The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection.