Remove Duplicate Posts, CVE-2023-29237

CVE, Research URL: CVE-2023-29237
Home page URL: Security reports for Remove Duplicate Posts
Application: Remove Duplicate Posts
Published on: -
Research Description: The Remove Duplicate Posts plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the rdp_ajax_process() and rdp_get_result() functions in versions up to, and including, 1.3.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete posts and retrieve duplicate post ids.
Affected versions: max 1.3.5.
Status: vulnerable