Simple 301 Redirects by BetterLinks, CVE-2021-24354

CVE, Research URL: CVE-2021-24354
Home page URL: Security reports for Simple 301 Redirects by BetterLinks
Application: Simple 301 Redirects by BetterLinks
Published on: Jun 14, 2021
Research Description: A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to install arbitrary plugins on vulnerable sites.
Affected versions: Min 2.0.0, max 2.0.3.
Status: vulnerable