Simple 301 Redirects by BetterLinks <= 2.0.3 - Unauthenticated Arbitrary Redirect Import

The Simple 301 Redirects by BetterLinks plugin for WordPress before 2.0.4 registers its importdata handler on admininit with no capability check. In versions 2.0.0 - 2.0.2 the import block also has no nonce check, so an unauthenticated attacker can import an arbitrary set of 301 redirects by...