What’s Vulnerable › Vulnerabilities

CVE-2021-24767: Redirect 404 Error Page to Homepage or Custom Page with Logs < 1.7.9 - Log Deletion via CSRF

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-11-08 · updated 2026-06-17
• Weakness: CWE-352

Description

The Redirect 404 Error Page to Homepage or Custom Page with Logs WordPress plugin before 1.7.9 does not check for CSRF when deleting logs, which could allow attacker to make a logged in admin delete them via a CSRF attack

Affected products

• WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs: before 1.7.9 — fixed in 1.7.9

How to fix

Upgrade to a fixed version: WPVibes Redirect 404 Error Page to Homepage or Custom Page with Logs 1.7.9. Check the vendor advisory for mitigations.

References

• https://wpscan.com/vulnerability/0b35ad4a-3d94-49b1-a98d-07acf8dd4962
• https://wpscan.com/vulnerability/0b35ad4a-3d94-49b1-a98d-07acf8dd4962

Get alerted when CVE-2021-24767 or the next vulnerability affects your stack