The export_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to export a site’s redirects.
CPE | Name | Operator | Version |
---|---|---|---|
simple_301_redirects | ge | 2.0.0 | |
simple_301_redirects | lt | 2.0.4 |