Description
WordPress Plugin Simple 301 Redirects-Addon-Bulk Uploader is prone to multiple security bypass vulnerabilities. Exploiting these issues may allow attackers to perform otherwise restricted actions and subsequently redirect all pages and posts of the blog to a malicious website, or export and clear the plugin settings. WordPress Plugin Simple 301 Redirects-Addon-Bulk Uploader version 1.2.4 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.2.5 or latest
References
Related Vulnerabilities
SharePoint CVE-2017-8511 Vulnerability (CVE-2017-8511)
PHP Other Vulnerability (CVE-2015-4599)
WordPress Plugin LearnPress-WordPress LMS SQL Injection (3.2.6.7)
WordPress Plugin Import and export users and customers Multiple Vulnerabilities (1.14.0.2)
Drupal 7PK - Security Features Vulnerability (CVE-2016-3163)