Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: wpdevteam Component: Simple 301 Redirects Clear all filters
TI-2021-06648 CVE-2021-24356 · GHSA-x8rw-vx6w-9xw8

Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Arbitrary Plugin Activation

Priority MEDIUM 43

In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insufficient nonce check on the AJAX action, simple301redirects/admin/activate_plugin, made it possible for authen…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02604 Published 2021-06-14 Fixed in 2.0.4 CWE-862
TI-2021-06647 CVE-2021-24355 · GHSA-x56p-hv7c-cxvx

Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Update and Retrieve Wildcard Value

Priority LOW 21

In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient nonce check on the AJAX actions, simple301redirects/admin/get_wildcard and simple301redirects/admin…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0072 Published 2021-06-14 Fixed in 2.0.4 CWE-862
TI-2021-06646 CVE-2021-24354 · GHSA-w57v-wqq6-mfw3

Simple 301 Redirects by BetterLinks - 2.0.0-2.0.3 - Arbitrary Plugin Installation

Priority MEDIUM 41

A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to install arbitrary plugins…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0148 Published 2021-06-14 Fixed in 2.0.4 CWE-862