CVE-2021-24142

HIGH 7.2CVE-2021-24142 · Published 18/03/2021 · updated 17/06/2026

In short

CVE-2021-24142 is a HIGH (CVSS 7.2) vulnerability affecting 301 redirects (webfactoryltd).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 69.1% of all vulnerabilities.
Fix: update to 2.51 or later.

Package	Affected versions	Patched versions
301 redirects webfactoryltd	`< 2.51`	`2.51`

Description

Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its "Redirect From" column when importing a CSV file, allowing high privilege users to perform SQL injections.

References

wpscan.com/vulnerability/19800898-d7b6-4edd-887b-dac3c0597f14 · Third Party Advisory

More vulnerabilities in 301 redirects

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free