Unauthenticated Access to Bulk Export and Clear List Actions in Simple 301 Redirects Addon

Unauthenticated Access to Bulk Export and Clear List Actions in Simple 301 Redirects Addon

CVE-2019-15818 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:N

The simple-301-redirects-addon-bulk-uploader plugin through 1.2.4 for WordPress has no requirement for authentication for action=bulk301export or action=bulk301clearlist.

Learn more about our Wordpress Pen Testing.