CVE-2021-24354
N/A
N/A
Summary
A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to install arbitrary plugins on vulnerable sites.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Unknown | Simple 301 Redirects by BetterLinks | 2.0.0 < 2.0.0* | affected |
| Unknown | Simple 301 Redirects by BetterLinks | 2.0.4 < 2.0.4 | affected |
Weaknesses
- CWE-862: CWE-862 Missing Authorization
ADP Enrichment
CVE Program Container
Additional References
- https://www.wordfence.com/blog/2021/05/severe-vulnerabilities-patched-in-simple-301-redirects-by-betterlinks-plugin/
- https://wpscan.com/vulnerability/8638b36c-6641-491f-b9df-5db3645e4668
References
- https://www.wordfence.com/blog/2021/05/severe-vulnerabilities-patched-in-simple-301-redirects-by-betterlinks-plugin/
- https://wpscan.com/vulnerability/8638b36c-6641-491f-b9df-5db3645e4668
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.