CVEs-PoC/2021/CVE-2021-24355.md

### [CVE-2021-24355](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24355)
![](https://img.shields.io/static/v1?label=Product&message=Simple%20301%20Redirects%20by%20BetterLinks&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2.0.0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=2.0.4%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-862%20Missing%20Authorization&color=brightgreen)

### Description

In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient nonce check on the AJAX actions, simple301redirects/admin/get_wildcard and simple301redirects/admin/wildcard, made it possible for authenticated users to retrieve and update the wildcard value for redirects.

### POC

#### Reference
- https://wpscan.com/vulnerability/ce8f9648-30fb-4fb9-894e-879dc0f26f98

#### Github
- https://github.com/20142995/nuclei-templates