Approved changes feed: RSS · Atom

cpe:2.3:a:wpdeveloper:simple_301_redirects:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorWpdeveloper (5e68162c-cdc3-57bc-b7a0-1ebc1941e1cb)
ProductSimple 301 Redirects (0390f3d7-a74e-5880-91ce-8bd162fd9a38)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wpdevelopers/simple-301-redirects purl2cpe 2026-06-01 10:16:48.309659
pkg:github/wpplugins/simple-301-redirects purl2cpe 2026-06-01 10:16:48.309663

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24356 vulnerable 2026-06-03 14:43:56.889268 Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Arbitrary Plugin Activation
In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insufficient nonce check on the AJAX action, simple301redirects/admin/activate_plugin, made it possible for authenticated users to activate arbitrary plugins installed on vulnerable sites.
Published: 2021-06-14T13:37:13.000Z
Updated: 2024-08-03T19:28:23.784Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24355 vulnerable 2026-06-03 14:43:56.888945 Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Update and Retrieve Wildcard Value
In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient nonce check on the AJAX actions, simple301redirects/admin/get_wildcard and simple301redirects/admin/wildcard, made it possible for authenticated users to retrieve and update the wildcard value for redirects.
Published: 2021-06-14T13:37:13.000Z
Updated: 2024-08-03T19:28:23.655Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24354 vulnerable 2026-06-03 14:43:56.888607 Simple 301 Redirects by BetterLinks - 2.0.0-2.0.3 - Arbitrary Plugin Installation
A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to install arbitrary plugins on vulnerable sites.
Published: 2021-06-14T13:37:13.000Z
Updated: 2024-08-03T19:28:23.447Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24353 vulnerable 2026-06-03 14:43:56.888255 Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect Import
The import_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to import a set of site redirects.
Published: 2021-06-14T13:37:13.000Z
Updated: 2024-08-03T19:28:23.449Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24352 vulnerable 2026-06-03 14:43:56.887701 Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect Export
The export_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to export a site's redirects.
Published: 2021-06-14T13:37:13.000Z
Updated: 2024-08-03T19:28:23.446Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.