The 404 to 301 plugin for WordPress is vulnerable to a security issue. This issue affects versions up to and including 3.0.7. It allows unauthorized people, who are already logged into the website, to view, create and edit redirections. This means that even though these people are not allowed to do this, they can still make changes to the website.