CVE-2021-24352

Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect Export

State: Published
Severity: Not scored
Published: Jun 14, 2021
Updated: Aug 3, 2024
Reserved: Jan 14, 2021

Description

The export_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to export a site's redirects.

Scores

The record has no CVSS score.

Weaknesses

CWE-862 Missing Authorization

Affected Products

Product	Versions
Simple 301 Redirects by BetterLinksUnknown	2.0.0 to before 2.0.0*Affected 2.0.4 to before 2.0.4Affected

References

https://wpscan.com/vulnerability/d770f1fa-7652-465a-833c-b7178146847d
https://www.wordfence.com/blog/2021/05/severe-vulnerabilities-patched-in-simple-301-redirects-by-betterlinks-plugin/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.