Trash Duplicate and 301 Redirect WordPress Plugin Missing Authorization Vulnerability Allowing Unauthenticated Post Deletion
Vulnerability
A vulnerability exists in the Trash Duplicate and 301 Redirect plugin for WordPress, in all versions through 1.9. The issue arises from a missing capability check on the 'duplicates-action-top' action, allowing unauthenticated attackers to delete arbitrary posts or pages. This unauthorized data deletion could lead to significant content loss for users.
Impact
Exploitation of this vulnerability allows for unauthorized deletion of posts or pages, leading to potential data loss.
Remediation
No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.