CVE-2026-4202
CVE-2026-4202 · Broken Access Control in extension "Redirect Tab"
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The extension fails to verify, if an authenticated user has permissions to access to redirects resulting in exposure of redirect records when editing a page.
CVSS 2.3 · Low · EPSS 0.2% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
extension "redirect tabs"
- Versions
- ≥ 4.0.0, < 4.0.5: Affected (semver)
- ≥ 3.0.0, < 3.1.7: Affected (semver)
- ≥ 0, < 2.1.2: Affected (semver)
Update to 2.1.2; Update to 3.1.7; Update to 4.0.5
ayacoo/redirect-tab Packagist
- Versions
- 1.0.0
- 1.1.0
- 2.0.0
- 2.0.1
- 2.1.0
- 2.1.1
- Affected ranges
- ECOSYSTEM: < 2.1.2
Update to 2.1.2
ayacoo/redirect-tab Packagist
- Versions
- 3.0.0
- 3.0.1
- 3.1.0
- 3.1.1
- 3.1.2
- 3.1.3
- 3.1.4
- 3.1.5
- 3.1.6
- Affected ranges
- ECOSYSTEM: ≥ 3.0.0, < 3.1.7
Update to 3.1.7
ayacoo/redirect-tab Packagist
- Versions
- 4.0.0
- 4.0.1
- 4.0.2
- 4.0.3
- 4.0.4
- Affected ranges
- ECOSYSTEM: ≥ 4.0.0, < 4.0.5
Update to 4.0.5