CVE-2021-24353

CVE-2021-24353: Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect Import

Vendor Unknown

Product Simple 301 Redirects by BetterLinks

Weakness CWE-862 · Missing authorization

Published June 14, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The import_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to import a set of site redirects.

Key dates

02Disclosure timeline

June 14, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-24353 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/862.html

Identifiers

CVE CVE-2021-24353

CWE CWE-862

Affected versions

Vendor Unknown

Product Simple 301 Redirects by BetterLinks

Affected ≥ 2.0.0 and < 2.0.0*

Vendor Unknown

Product Simple 301 Redirects by BetterLinks

Affected ≥ 2.0.4 and < 2.0.4