Description
WordPress Plugin Simple 301 Redirects-Addon-Bulk Uploader is prone to multiple security bypass vulnerabilities. Exploiting these issues may allow attackers to perform otherwise restricted actions and subsequently redirect all pages and posts of the blog to a malicious website, or export and clear the plugin settings. WordPress Plugin Simple 301 Redirects-Addon-Bulk Uploader version 1.2.4 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.2.5 or latest
References
Related Vulnerabilities
WordPress Plugin Bad Behavior Multiple Cross-Site Scripting Vulnerabilities (2.2.4)
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.7)
WordPress Plugin Contact Form 7 Captcha Cross-Site Request Forgery (0.0.8)
MySQL CVE-2022-21370 Vulnerability (CVE-2022-21370)
Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-5045)