CVE-2021-24352
HIGHSimple 301 Redirects by BetterLinks 2.0.0-2.0.4 - Unauthenticated Sensitive Data Exposure via Export Function
Title source: llmDescription
The export_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to export a site's redirects.
References (2)
Core 2
Core References
Exploit, Third Party Advisory x_refsource_confirm
https://wpscan.com/vulnerability/d770f1fa-7652-465a-833c-b7178146847d
Exploit, Third Party Advisory x_refsource_misc
https://www.wordfence.com/blog/2021/05/severe-vulnerabilities-patched-in-simple-301-redirects-by-betterlinks-plugin/
Scores
CVSS v3
8.8
EPSS
0.0117
EPSS Percentile
63.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H
Details
CWE
CWE-862
Status
published
Products (1)
wpdeveloper/simple_301_redirects
2.0.0 - 2.0.4
Published
Jun 14, 2021
Tracked Since
Feb 18, 2026