WordPress plugin
Combo WP Rewrite Slugs security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Combo WP Rewrite Slugs vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Settings Change ≤1.0No patch available | CVE-2024-51817 |
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Settings Change
≤1.0No patch available
Combo WP Rewrite Slugs: common questions
Does Combo WP Rewrite Slugs have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Combo WP Rewrite Slugs: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Combo WP Rewrite Slugs I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Combo WP Rewrite Slugs vulnerability?
CVE-2024-51817, published Nov 8, 2024: Combo WP Rewrite Slugs <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Settings Change. Severity: Medium (CVSS 4.3).
Is any Combo WP Rewrite Slugs vulnerability listed in CISA KEV?
No. None of the known Combo WP Rewrite Slugs vulnerabilities is currently listed in the CISA KEV catalog.