Bulk Uploader add-on security issue

Hi all – There was a recently discovered, and recently patched security issue in a popular add-on to this plugin “Simple 301 Redirects – Addon – Bulk Uploader” https://www.ads-software.com/plugins/simple-301-redirects-addon-bulk-uploader

The issue allowed a third party to update the option the my plugin uses to perform redirects without appropriate admin access. If you have that plugin installed, it’s imperative that you update it to at least version 1.2.5 to remove the vulnerability.

You will know if your site has already been compromised because it will have a wildcard redirect to another site inserted in the options screen. In that case you should remove the offending redirect, and you may also want to ask your web host to flush the cache on your site. Disabling Simple 301 Redirects altogether will also prevent the redirect from working any longer.

This plugin isn’t one that I’m involved with, but nonetheless I apologize to anyone who was impacted by the vulnerability.