Vulnerabilities and security researches forsimple-301-redirects simple-301-redirects

Direction: ascending

Jun 06, 2024

Simple 301 Redirects by BetterLinks # CVE-2021-24356

CVE, Research URL: CVE-2021-24356
Home page URL: Security reports for Simple 301 Redirects by BetterLinks
Application: Simple 301 Redirects by BetterLinks
Date: Jun 14, 2021
Research Description: In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insufficient nonce check on the AJAX action, simple301redirects/admin/activate_plugin, made it possible for authenticated users to activate arbitrary plugins installed on vulnerable sites.
Affected versions: Min 2.0.0, max 2.0.3.
Status: vulnerable

Simple 301 Redirects by BetterLinks # CVE-2021-24352

CVE, Research URL: CVE-2021-24352
Home page URL: Security reports for Simple 301 Redirects by BetterLinks
Application: Simple 301 Redirects by BetterLinks
Date: Jun 14, 2021
Research Description: The export_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to export a site's redirects.
Affected versions: Min 2.0.0, max 2.0.3.
Status: vulnerable

Simple 301 Redirects by BetterLinks # CVE-2021-24354

CVE, Research URL: CVE-2021-24354
Home page URL: Security reports for Simple 301 Redirects by BetterLinks
Application: Simple 301 Redirects by BetterLinks
Date: Jun 14, 2021
Research Description: A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to install arbitrary plugins on vulnerable sites.
Affected versions: Min 2.0.0, max 2.0.3.
Status: vulnerable

Simple 301 Redirects by BetterLinks # CVE-2021-24355

CVE, Research URL: CVE-2021-24355
Home page URL: Security reports for Simple 301 Redirects by BetterLinks
Application: Simple 301 Redirects by BetterLinks
Date: Jun 14, 2021
Research Description: In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient nonce check on the AJAX actions, simple301redirects/admin/get_wildcard and simple301redirects/admin/wildcard, made it possible for authenticated users to retrieve and update the wildcard value for redirects.
Affected versions: Min 2.0.0, max 2.0.3.
Status: vulnerable

Simple 301 Redirects by BetterLinks # CVE-2021-24353

CVE, Research URL: CVE-2021-24353
Home page URL: Security reports for Simple 301 Redirects by BetterLinks
Application: Simple 301 Redirects by BetterLinks
Date: Jun 14, 2021
Research Description: The import_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to import a set of site redirects.
Affected versions: Min 2.0.0, max 2.0.3.
Status: vulnerable

Jun 10, 2024

Simple 301 Redirects by BetterLinks # CVE-2023-47761

CVE, Research URL: CVE-2023-47761
Home page URL: Security reports for Simple 301 Redirects by BetterLinks
Application: Simple 301 Redirects by BetterLinks
Date: Dec 09, 2024
Research Description: Missing Authorization vulnerability in WPDeveloper Simple 301 Redirects by BetterLinks simple-301-redirects allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple 301 Redirects by BetterLinks: from n/a through <= 2.0.7.
Affected versions: max 2.0.8.
Status: vulnerable

Jun 16, 2026

Simple 301 Redirects by BetterLinks # c37fb83ec3a39aab64d90273a40a1e17d3d63955

CVE, Research URL: c37fb83ec3a39aab64d90273a40a1e17d3d63955
Home page URL: Security reports for Simple 301 Redirects by BetterLinks
Application: Simple 301 Redirects by BetterLinks
Date: Aug 30, 2023
Research Description: Simple 301 Redirects By BetterLinks – Easy WordPress Redirect Manager for Redirects, 404 Error Log & More [simple-301-redirects] < 2.0.8 Simple 301 Redirects <= 2.0.7 - Cross-Site Request Forgery via 'clicked' The Simple 301 Redirects plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.7. This is due to missing or incorrect nonce validation on the 'clicked' function. This makes it possible for unauthenticated attackers to enable or disable click tracking via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 2.0.8.
Status: vulnerable

Simple 301 Redirects by BetterLinks # cda335b97e354f8772578da8c1164e578349f146

CVE, Research URL: cda335b97e354f8772578da8c1164e578349f146
Home page URL: Security reports for Simple 301 Redirects by BetterLinks
Application: Simple 301 Redirects by BetterLinks
Date: May 26, 2021
Research Description: Simple 301 Redirects By BetterLinks – Easy WordPress Redirect Manager for Redirects, 404 Error Log & More [simple-301-redirects] < 2.0.4 WordPress Simple 301 Redirects by BetterLinks plugin <= 2.0.3 (2.0.0 – 2.0.3) - Unauthenticated Redirect Import/Export vulnerability Allowing Total Site Redirection Unauthenticated Redirect Import/Export vulnerability Allowing Total Site Redirection discovered by WordFence in WordPress Simple 301 Redirects by BetterLinks plugin (versions <= 2.0.3 only versions from 2.0.0 to 2.0.3).
Affected versions: max 2.0.4.
Status: vulnerable

Simple 301 Redirects by BetterLinks # 0534f45c-4d0a-40f8-abac-71ca2409a738

CVE, Research URL: 0534f45c-4d0a-40f8-abac-71ca2409a738
Home page URL: Security reports for Simple 301 Redirects by BetterLinks
Application: Simple 301 Redirects by BetterLinks
Date: -
Research Description: Simple 301 Redirects By BetterLinks – Easy WordPress Redirect Manager for Redirects, 404 Error Log & More [simple-301-redirects] < 2.0.8 Simple 301 Redirects < 2.0.8 - Cross-Site Request Forgery via 'clicked' The Simple 301 Redirects plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.7. This is due to missing or incorrect nonce validation on the 'clicked' function. This makes it possible for unauthenticated attackers to enable or disable click tracking via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 2.0.8.
Status: vulnerable

Simple 301 Redirects by BetterLinks # 473965d5f7c2979d8362939177ee59b29e85f54c

CVE, Research URL: 473965d5f7c2979d8362939177ee59b29e85f54c
Home page URL: Security reports for Simple 301 Redirects by BetterLinks
Application: Simple 301 Redirects by BetterLinks
Date: May 26, 2021
Research Description: Simple 301 Redirects By BetterLinks – Easy WordPress Redirect Manager for Redirects, 404 Error Log & More [simple-301-redirects] >= 2.0.0 - <= 2.0.3 WordPress Simple 301 Redirects by BetterLinks plugin <= 2.0.3 (2.0.0 – 2.0.3) - Authenticated Arbitrary Plugin Installation/Activation vulnerability Authenticated Arbitrary Plugin Installation/Activation vulnerability discovered by WordFence in WordPress Simple 301 Redirects by BetterLinks plugin (versions <= 2.0.3 only versions from 2.0.0 to 2.0.3).
Affected versions: Min 2.0.0, max 2.0.3.
Status: vulnerable

Simple 301 Redirects by BetterLinks # 8acb4b18c6a47ea6a5273c9d7f2b4092748c0327

CVE, Research URL: 8acb4b18c6a47ea6a5273c9d7f2b4092748c0327
Home page URL: Security reports for Simple 301 Redirects by BetterLinks
Application: Simple 301 Redirects by BetterLinks
Date: May 26, 2021
Research Description: Simple 301 Redirects By BetterLinks – Easy WordPress Redirect Manager for Redirects, 404 Error Log & More [simple-301-redirects] >= 2.0.0 - <= 2.0.3 WordPress Simple 301 Redirects by BetterLinks plugin <= 2.0.3 (2.0.0 – 2.0.3) - Authenticated Wildcard Activation and Retrieval vulnerability Authenticated Wildcard Activation and Retrieval vulnerability discovered by WordFence in WordPress Simple 301 Redirects by BetterLinks plugin (versions <= 2.0.3 only versions 2.0.0 – 2.0.3).
Affected versions: Min 2.0.0, max 2.0.3.
Status: vulnerable

Simple 301 Redirects by BetterLinks # ed1dcc9e6787bd581254fb171110875f5fdd2dfc

CVE, Research URL: ed1dcc9e6787bd581254fb171110875f5fdd2dfc
Home page URL: Security reports for Simple 301 Redirects by BetterLinks
Application: Simple 301 Redirects by BetterLinks
Date: Aug 12, 2019
Research Description: Simple 301 Redirects By BetterLinks – Easy WordPress Redirect Manager for Redirects, 404 Error Log & More [simple-301-redirects] < 1.2.5 WordPress Simple 301 Redirects Addon Bulk Uploader plugin <= 1.2.4 - Unauthenticated option changes and other security issues Unauthenticated option changes and other security issues found by Jerome Bruandet (Nintechnet) in WordPress Simple 301 Redirects Addon Bulk Uploader plugin (versions <= 1.2.4).
Affected versions: max 1.2.5.
Status: vulnerable

Oct 26, 2026

Simple 301 Redirects by BetterLinks # PSC-2026-65719

PSC, Research URL: PSC-2026-65719
Home page URL: Security reports for Simple 301 Redirects by BetterLinks
Application: Simple 301 Redirects by BetterLinks
Date: Oct 26, 2026
Research Description: Redirect managers control how incoming URLs are routed and can change the destination of existing site traffic. Simple 301 Redirects by BetterLinks - Easy Redirect Manager version 2.1.2 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-65719. The review focused on redirect management permissions, source and destination validation, wildcard rules, bulk import and export, and dashboard output.
Affected versions: Min 2.1.2, max 2.1.2.
Status: SAFE & CERTIFIED