Input validation vulnerability in Community by PeepSo – Social Network, Membership, Registration, User Profiles 6.0.9.0

The Community by PeepSo plugin for WordPress is vulnerable to a security flaw. In versions up to and including 6.0.9.0, attackers who are not logged into the site can create a link that tricks the site administrator into performing an action. This link could be used to duplicate user fields on the site without permission. It is caused by missing or incorrect nonce validation on the duplicate_field() function.