CVE-2019-15776 – Simple 301 Redirects Addon Bulk Uploader <= 1.2.4 - Missing Authorization

https://notcve.org/view.php?id=CVE-2019-15776

The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect rule injection via a CSV file. El plugin simple-301-redirects-addon-bulk-uploader versiones anteriores a 1.2.5 para WordPress, no presenta protección contra la inyección de la regla de redireccionamiento 301 por medio de un archivo CSV. • https://threatpost.com/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn/147671 https://wordpress.org/plugins/simple-301-redirects-addon-bulk-uploader/#developers https://wpvulndb.com/vulnerabilities/9503 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') CWE-862: Missing Authorization •