| Package | Affected versions | Patched versions |
|---|---|---|
| simple 301 redirects | ≥ 2.0.0, < 2.0.4 | 2.0.4 |
In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insufficient nonce check on the AJAX action, simple301redirects/admin/activate_plugin, made it possible for authenticated users to activate arbitrary plugins installed on vulnerable sites.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free