Skip to content
Sign in
Not rated

CVE-2021-24853 The QR Redirector WordPress plugin before 1.6 does not have capability and CSRF checks when saving bulk QR Redirector…

Description

The QR Redirector WordPress plugin before 1.6 does not have capability and CSRF checks when saving bulk QR Redirector settings via the qr_save_bulk AJAX action, which could allow any authenticated user, such as subscriber to change the redirect response status code of arbitrary QR Redirects

Affected products and versions

Product Affected versions Fixed in
QR Redirector 1.6 earliest → < 1.6 1.6

Other CVEs of QR Redirector

The 2 CVEs of QR Redirector →
CVE-2021-24854 The QR Redirector WordPress plugin before 1.6.1 does not sanitise and escape some of the QR Redirect fields, which could… Not rated
Track this CVE