VULNERABILITY INTELLIGENCE

CVE-2021-24354

CVSS score8.8 HIGH
EPSS probability1.48%
CISA KEVNot currently listed
Published2021-06-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to install arbitrary plugins on vulnerable sites.

Weakness classification

  • contact@wpscan.com: CWE-862
  • nvd@nist.gov: CWE-862

Primary references