Access violation vulnerability in Trash Duplicate and 301 Redirect 1.9

The Trash Duplicate and 301 Redirect plugin for WordPress has a security issue that can lead to data being deleted without permission. This is because it doesn’t have a check to make sure the user has the right capability before being able to delete posts or pages. This vulnerability affects all versions of the plugin up to and including 1.9. This means that attackers who are not logged in can delete any post or page they want.

Detected in:

Trash Duplicate and 301 Redirect fixed vulnerable versions: >= * <= 1.9

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.