The Trash Duplicate and 301 Redirect plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'duplicates-action-top' action in all versions up to, and including, 1.9. This makes it possible for unauthenticated attackers to delete arbitrary posts/pages.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Trash Duplicate And 301 Redirect Plugin | — | Update trash-duplicate-and-301-redirect plugin to version 1.9.1, or a newer patched version | Aug 18, 2025 | Feb 18, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub