CVE-2021-24286: Mooveagency Redirect 404 To Parent

Medium severity, CVSS 6.1. EPSS: 13.9% chance of exploitation in the next 30 days.

The settings page of the Redirect 404 to parent WordPress plugin before 1.3.1 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue

Affected products

• Mooveagency Redirect 404 To Parent: before 1.3.1 (fixed in 1.3.1)

Published 2021-05-14. Last modified 2026-06-17.