Simple 301 Redirects by BetterLinks, CVE-2021-24355

CVE, Research URL: CVE-2021-24355
Home page URL: Security reports for Simple 301 Redirects by BetterLinks
Application: Simple 301 Redirects by BetterLinks
Published on: Jun 14, 2021
Research Description: In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient nonce check on the AJAX actions, simple301redirects/admin/get_wildcard and simple301redirects/admin/wildcard, made it possible for authenticated users to retrieve and update the wildcard value for redirects.
Affected versions: Min 2.0.0, max 2.0.3.
Status: vulnerable