Not rated
CVE-2021-24356 In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insufficient…
Description
In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insufficient nonce check on the AJAX action, simple301redirects/admin/activate_plugin, made it possible for authenticated users to activate arbitrary plugins installed on vulnerable sites.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Simple 301 Redirects by BetterLinks 2.0 | earliest → latest | 2.0.4 |
Other CVEs of Simple 301 Redirects by BetterLinks
The 5 CVEs of Simple 301 Redirects by BetterLinks →
CVE-2021-24352
The export_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or…
Not rated
CVE-2021-24353
The import_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or…
Not rated
CVE-2021-24354
A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks…
Not rated
CVE-2021-24355
In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient…
Not rated