nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2016-20071 CVE-2016-20071
HIGH
WordPress 404 Redirection Manager Plugin 1.0 SQL Injection
Record summary
CVE-2016-20071 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.
Description
The 404 Redirection Manager plugin version 1.0 for WordPress contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through unsanitized user input. Attackers can craft GET requests with SQL injection payloads to manipulate database queries and extract sensitive information from the WordPress database.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 15, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
404 Redirection ManagerBrowse 404-redirection-manager / 404 Redirection Manager | CVE List | 1.0 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBWordPress Plugin 404 Redirection Manager 1.0 - SQL InjectionExploitDB exploitby Ahmed SherifNot analyzed1 file
References
4Product Referenceproduct
https://wordpress.org/plugins/404-redirection-manager ExploitDB-40941exploit
https://www.exploit-db.com/exploits/40941 VulnCheck Advisory: WordPress 404 Redirection Manager Plugin 1.0 SQL InjectionThird-party advisory
https://www.vulncheck.com/advisories/wordpress-404-redirection-manager-plugin-sql-injection