Simple 301 Redirects by BetterLinks, CVE-2021-24356

CVE, Research URL: CVE-2021-24356
Home page URL: Security reports for Simple 301 Redirects by BetterLinks
Application: Simple 301 Redirects by BetterLinks
Published on: Jun 14, 2021
Research Description: In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insufficient nonce check on the AJAX action, simple301redirects/admin/activate_plugin, made it possible for authenticated users to activate arbitrary plugins installed on vulnerable sites.
Affected versions: Min 2.0.0, max 2.0.3.
Status: vulnerable