CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in WPDeveloper Simple 301 Redirects by BetterLinks simple-301-redirects allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple 301 Redirects by BetterLinks: from n/a through <= 2.0.7.
Explanation of Vulnerability in Simple Terms
Simple 301 Redirects by BetterLinks versions up to 2.0.7 lack proper authorization checks on redirect management functions. A logged-in user with low privileges can modify or create redirects without the intended permission level. This affects the integrity of redirect rules but does not expose sensitive data or disable the site.
What an attacker can do
A low-privilege user can create or modify redirect rules without proper authorization.
Potential impact on your site
Unauthorized users can alter your site's redirect configuration, potentially breaking links or redirecting traffic maliciously.
Conditions required to exploit
Attacker must have a low-privilege WordPress account (e.g., Contributor or Subscriber role).
Key dates
External resources
Related vulnerabilities
