Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:simple_301_redirects_by_betterlinks:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductSimple 301 Redirects By Betterlinks (afb54ba1-28ad-59a3-b0e7-1747f4d430db)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24356 vulnerable 2026-06-08 05:30:04.237281 Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Arbitrary Plugin Activation
In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insufficient nonce check on the AJAX action, simple301redirects/admin/activate_plugin, made it possible for authenticated users to activate arbitrary plugins installed on vulnerable sites.
Published: 2021-06-14T13:37:13.000Z
Updated: 2024-08-03T19:28:23.784Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24355 vulnerable 2026-06-08 05:30:04.236944 Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Update and Retrieve Wildcard Value
In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient nonce check on the AJAX actions, simple301redirects/admin/get_wildcard and simple301redirects/admin/wildcard, made it possible for authenticated users to retrieve and update the wildcard value for redirects.
Published: 2021-06-14T13:37:13.000Z
Updated: 2024-08-03T19:28:23.655Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24354 vulnerable 2026-06-08 05:30:04.236606 Simple 301 Redirects by BetterLinks - 2.0.0-2.0.3 - Arbitrary Plugin Installation
A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to install arbitrary plugins on vulnerable sites.
Published: 2021-06-14T13:37:13.000Z
Updated: 2024-08-03T19:28:23.447Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24353 vulnerable 2026-06-08 05:30:04.236246 Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect Import
The import_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to import a set of site redirects.
Published: 2021-06-14T13:37:13.000Z
Updated: 2024-08-03T19:28:23.449Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24352 vulnerable 2026-06-08 05:30:04.235251 Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect Export
The export_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to export a site's redirects.
Published: 2021-06-14T13:37:13.000Z
Updated: 2024-08-03T19:28:23.446Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.