Broken access control vulnerability fixed in WordPress 404 to 301 plugin.

https://blog.nintechnet.com/broken-access-control-vulnerability-fixed-in-wordpress-404-to-301-plugin/