CVE-2021-24354 | BDVDB-2026-155437 Detail

Simple 301 Redirects by BetterLinks

Description#

A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to install arbitrary plugins on vulnerable sites.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-862 Missing Authorization

References#

https://www.wordfence.com/blog/2021/05/severe-vulnerabilities-patched-in-simple-301-redirects-by-betterlinks-plugin/
https://wpscan.com/vulnerability/8638b36c-6641-491f-b9df-5db3645e4668

Exploit#

No public exploit known

History#

Version 12021-06-14Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.