Vulnerability Bulletins

Critical Vulnerability Patched in 301 Redirects – Easy Redirect Manager

   
Affected software Wordpress
 
https://www.wordfence.com/blog/2019/12/critical-vulnerability-patched-in-301-redirects-easy-redirect-manager/ Description: Authenticated Arbitrary Redirect Injection and ModificationAffected Plugin: 301 Redirects – Easy Redirect Manager Affected Versions: <= 2.40CVSS Score: 9.0 (Critical)CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:HPatched Version: 2.45 On Friday December 13th, our Threat Intelligence team discovered vulnerabilities present in 301 Redirects – Easy

More info:

https://www.wordfence.com/blog/2019/12/critical-vulnerability-patched-in-301-redirects-easy-redirect-manager/