PatchTheCVE: simple 301 redirectshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2021-24356: In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insuhttps://patchthecve.com/cve/CVE-2021-24356.htmlhttps://patchthecve.com/cve/CVE-2021-24356.htmlWed, 17 Jun 2026 03:39:53 +0000HIGH 8.8: In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insufficient nonce check on the AJAX action, simple301redirects/admin/activate_plugin, made it possible for authenticated users to activate arbitrary plugins installed on vulnerable sites.CVE-2021-24355: In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and inhttps://patchthecve.com/cve/CVE-2021-24355.htmlhttps://patchthecve.com/cve/CVE-2021-24355.htmlWed, 17 Jun 2026 03:39:53 +0000MEDIUM 4.3: In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient nonce check on the AJAX actions, simple301redirects/admin/get_wildcard and simple301redirects/admin/wildcard, made it possible for authenticated users to retrieve and update the wCVE-2021-24354: A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by Bethttps://patchthecve.com/cve/CVE-2021-24354.htmlhttps://patchthecve.com/cve/CVE-2021-24354.htmlWed, 17 Jun 2026 03:39:53 +0000HIGH 8.8: A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to install arbitrary plugins on vulnerable sites.CVE-2021-24353: The import_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capabhttps://patchthecve.com/cve/CVE-2021-24353.htmlhttps://patchthecve.com/cve/CVE-2021-24353.htmlWed, 17 Jun 2026 03:39:53 +0000HIGH 8.8: The import_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to import a set of site redirects.CVE-2021-24352: The export_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capabhttps://patchthecve.com/cve/CVE-2021-24352.htmlhttps://patchthecve.com/cve/CVE-2021-24352.htmlWed, 17 Jun 2026 03:39:52 +0000HIGH 8.8: The export_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to export a site's redirects.CVE-2019-15818: The simple-301-redirects-addon-bulk-uploader plugin through 1.2.4 for WordPress has no requirement for authenthttps://patchthecve.com/cve/CVE-2019-15818.htmlhttps://patchthecve.com/cve/CVE-2019-15818.htmlWed, 17 Jun 2026 02:21:08 +0000MEDIUM 6.1: The simple-301-redirects-addon-bulk-uploader plugin through 1.2.4 for WordPress has no requirement for authentication for action=bulk301export or action=bulk301clearlist.