CVE-2015-9323

CRITICAL NUCLEI

Duckdev 404 TO 301 < 2.0.3 - SQL Injection

Title source: rule

Description

The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection.

Exploits (1)

exploitdb WORKING POC
by Ron Jost · pythonwebappsphp
https://www.exploit-db.com/exploits/50698

Nuclei Templates (1)

404 to 301 <= 2.0.2 - Authenticated Blind SQL Injection
CRITICALVERIFIEDby Harsh

References (2)

Scores

CVSS v3 9.8
EPSS 0.7638
EPSS Percentile 98.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
duckdev/404_to_301 < 2.0.3
Published Aug 16, 2019
Tracked Since Feb 18, 2026