QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2021-24354

Back to search

CVE-2021-24354

Published: Jun 14, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to install arbitrary plugins on vulnerable sites.

VendorProductVersions

Unknown

Simple 301 Redirects by BetterLinks

affected
2.0.0 - < 2.0.0*
affected
2.0.4 - < 2.0.4

Weaknesses (CWE)

CWE-862

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now