CVE-2021-24352: Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect Export
The exportdata function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to export a site's redirects.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Simple 301 Redirects by BetterLinks WordPress plugin vulnerability?
The vulnerability ID for this Simple 301 Redirects by BetterLinks WordPress plugin vulnerability is CVE-2021-24352.
What is the severity level of CVE-2021-24352?
CVE-2021-24352 has a severity level of 8.8 (high).
What is the affected software for CVE-2021-24352?
The affected software for CVE-2021-24352 is Simple 301 Redirects by BetterLinks WordPress plugin version 2.0.0 to 2.0.4.
What is the impact of CVE-2021-24352?
CVE-2021-24352 allows unauthenticated users to export a site's redirects in Simple 301 Redirects by BetterLinks WordPress plugin.
Are there any patches or fixes available for CVE-2021-24352?
Yes, patches have been released to fix CVE-2021-24352. It is recommended to update to version 2.0.4 of the Simple 301 Redirects by BetterLinks WordPress plugin.