| Package | Affected versions | Patched versions |
|---|---|---|
| simple 301 redirects | ≥ 2.0.0, < 2.0.4 | 2.0.4 |
In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient nonce check on the AJAX actions, simple301redirects/admin/get_wildcard and simple301redirects/admin/wildcard, made it possible for authenticated users to retrieve and update the wildcard value for redirects.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free