CVE-2019-15776 - The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect rule injection via a CSV file

MEDIUM

The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect rule injection via a CSV file

Published Aug 29, 2019

6.1

MEDIUM

CVSS 3.0

EPSS 1.34%

The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect rule injection via a CSV file.

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6700		Advisory
https://threatpost.com/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn/147671/		x_refsource_MISCExploitThird Party Advisory
https://wordpress.org/plugins/simple-301-redirects-addon-bulk-uploader/#developers		x_refsource_MISCProductThird Party Advisory
https://wpvulndb.com/vulnerabilities/9503		x_refsource_MISCThird Party Advisory