Description
In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient nonce check on the AJAX actions, simple301redirects/admin/get_wildcard and simple301redirects/admin/wildcard, made it possible for authenticated users to retrieve and update the wildcard value for redirects.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Simple 301 Redirects by BetterLinks | 2.0.0 – < 2.0.0*, 2.0.4 – < 2.0.4 | 2.0.0* |