Security Advisory

CVE-2021-24355

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-06-14 13:37:13

Last updated 2024-08-03 19:28:23

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient nonce check on the AJAX actions, simple301redirects/admin/get_wildcard and simple301redirects/admin/wildcard, made it possible for authenticated users to retrieve and update the wildcard value for redirects.

← Browse all CVEs View on cve.org ↗