title: Simple 301 Redirects by BetterLinks - 2.0.0-2.0.3 - Arbitrary Plugin Installation
description: A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to install arbitrary plugins on vulnerable sites.
problem types: CWE-862 Missing Authorization
affected:
{
product: Simple 301 Redirects by BetterLinks
vendor: Unknown
versions:
lessThan: 2.0.0*, status: affected, version: 2.0.0, versionType: custom
lessThan: 2.0.4, status: affected, version: 2.0.4, versionType: custom
}