81 matches found
WordPress plugin BetterLinks 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2025-1486 · Wpdeveloper · Wpdeveloper Betterlinks
Name of the Vulnerable Software and Affected Versions: WPDeveloper BetterLinks versions 1.6.0 and earlier Description: The issue is related to a Missing Authorization vulnerability in WPDeveloper BetterLinks, which allows exploiting incorrectly configured access control security levels...
CVE-2023-47761 WordPress Simple 301 Redirects by BetterLinks plugin <= 2.0.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPDeveloper Simple 301 Redirects by BetterLinks simple-301-redirects allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple 301 Redirects by BetterLinks: from n/a through = 2.0.7...
PT-2024-13481 · Betterlinks · Wpdeveloper Simple 301 Redirects
Name of the Vulnerable Software and Affected Versions: WPDeveloper Simple 301 Redirects by BetterLinks versions 2.0.7 and earlier Description: The issue affects the access control security levels in WPDeveloper Simple 301 Redirects by BetterLinks, allowing exploitation due to missing authorizatio...
WordPress plugin Simple 301 Redirects by BetterLinks 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2024-51672
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPDeveloper BetterLinks allows SQL Injection.This issue affects BetterLinks: from n/a through 2.1.7...
CVE-2024-51672
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPDeveloper BetterLinks betterlinks allows SQL Injection.This issue affects BetterLinks: from n/a through = 2.1.7...
CVE-2024-51672 WordPress BetterLinks plugin <= 2.1.7 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPDeveloper BetterLinks betterlinks allows SQL Injection.This issue affects BetterLinks: from n/a through = 2.1.7...
CVE-2024-51672 WordPress BetterLinks plugin <= 2.1.7 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPDeveloper BetterLinks betterlinks allows SQL Injection.This issue affects BetterLinks: from n/a through = 2.1.7...
CVE-2024-51672
CVE-2024-51672 relates to the WordPress plugin BetterLinks (WPDeveloper) up to version 2.1.7, where an SQL Injection vulnerability arises from improper neutralization of specific elements in SQL commands. The vulnerability affects BetterLinks
WordPress plugin BetterLinks SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
PT-2024-34817 · Wpdeveloper · Wpdeveloper Betterlinks
Name of the Vulnerable Software and Affected Versions: WPDeveloper BetterLinks versions 2.1.7 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...
WordPress BetterLinks plugin <= 2.1.7 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Marek Mikita Patchstack Alliance in WordPress Plugin BetterLinks versions = 2.1.7...
WordPress BetterLinks Plugin <= 2.1.7 is vulnerable to SQL Injection
Software BetterLinks Type Plugin Vulnerable versions = 2.1.7 Fixed in 2.1.8 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51672 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 159a4550c364 Credits Marek Mikita Required privilege Administrator Publish...
VulnCheck KEV: CVE-2021-24353
The importdata function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to import a set of site redirects...
Simple 301 Redirects by BetterLinks < 2.0.8 - Missing Authorization via clicked
Description The Simple 301 Redirects by BetterLinks plugin for WordPress is vulnerable to unauthorized enabling of plugin usage tracking due to a missing capability check on the clicked function in all versions up to, and including, 2.0.7. This makes it possible for subscribers to enable plugin...
BetterLinks < 1.6.1 - Improper Authorization to Data Import and Export
Description The BetterLinks plugin for WordPress is vulnerable to unauthorized access and modification due to insufficient capability checks on the importdata and exportdata functions in versions up to, and including, 1.6.0. This makes it possible for unauthenticated attackers to import and expor...
WordPress Simple 301 Redirects by BetterLinks Plugin <= 2.0.7 is vulnerable to Broken Access Control
Software Simple 301 Redirects by BetterLinks Type Plugin Vulnerable versions = 2.0.7 Fixed in 2.0.8 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47761 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 76b78ec76a84 Credits Abd...
WordPress BetterLinks Plugin <= 1.6.0 is vulnerable to Broken Access Control
Software BetterLinks Type Plugin Vulnerable versions = 1.6.0 Fixed in 1.6.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-45104 Patch priority High CVSS severity High 7.3 Developer Claim ownership PSID cff55ac44f90 Credits Nguyen Anh Tien Required...
