wpdevteam

Records210All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical13CVSS 9.0–10.0

CVSS high44CVSS 7.0–8.9

Exploited now

wpdevteam records in CISA KEV

No wpdevteam vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Essential Addons For Elementor 55 records CRITICAL Embedpress 26 records MEDIUM Essential Blocks 25 records HIGH Reviewx 8 records HIGH Simple 301 Redirects 5 records MEDIUM Betterdocs 4 records MEDIUM Notificationx 4 records CRITICAL Betterlinks 3 records MEDIUM

Records

5 records in Simple 301 Redirects · all components

TI-2021-06648 CVE-2021-24356 · GHSA-x8rw-vx6w-9xw8

Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Arbitrary Plugin Activation

MEDIUM 43

In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insufficient nonce check on the AJAX action, simple301redirects/admin/activate_plugin, made it possible for authen…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02604 Published 2021-06-14 Fixed in 2.0.4 CWE-862

TI-2021-06646 CVE-2021-24354 · GHSA-w57v-wqq6-mfw3

Simple 301 Redirects by BetterLinks - 2.0.0-2.0.3 - Arbitrary Plugin Installation

MEDIUM 41

A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to install arbitrary plugins…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0148 Published 2021-06-14 Fixed in 2.0.4 CWE-862

TI-2021-06645 CVE-2021-24353 · GHSA-jpx5-rg85-r3xv

Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect Import

MEDIUM 40

The import_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to import a set of site redirects.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01112 Published 2021-06-14 Fixed in 2.0.4 CWE-862

TI-2021-06644 CVE-2021-24352 · GHSA-4q9c-h5m8-8ffp

Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect Export

MEDIUM 40

The export_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to export a site's redirects.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01175 Published 2021-06-14 Fixed in 2.0.4 CWE-862

TI-2021-06647 CVE-2021-24355 · GHSA-x56p-hv7c-cxvx

Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Update and Retrieve Wildcard Value

LOW 21

In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient nonce check on the AJAX actions, simple301redirects/admin/get_wildcard and simple301redirects/admin…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0072 Published 2021-06-14 Fixed in 2.0.4 CWE-862

Open these records in search →

Critical	13
High	44
Medium	152
Low	1
No CVSS	0