Easy HTTPS Redirection (SSL) < 2.0.2 – Subscriber+ Scan Result Disclosure and Site-Wide URL Rewrite

The Easy HTTPS Redirection (SSL) WordPress plugin versions before 2.0.2 lack capability checks in certain AJAX actions. An authenticated user with low privileges, such as a Subscriber, may disclose URLs collected by the content scanner from private and draft posts and site options, and trigger a site-wide rewrite of those URLs after an administrator has run a scan.

Unauthorized disclosure of URLs associated with private or draft content and site options, along with unauthorized site-wide URL rewriting. This may expose sensitive URL information and alter URL references across the site.