Remove Duplicate Posts Vulnerabilities

[en] Missing Authorization vulnerability in Muhammad Rehman Remove Duplicate Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Remove Duplicate Posts: from n/a through 1.3.5.

Affected:

up to 1.3.5

Fix:

No patched version reported

Disclosed:

Dec 9, 2024

CVE-2023-29237 on NVD →

The Remove Duplicate Posts plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the rdp_ajax_process() and rdp_get_result() functions in versions up to, and including, 1.3.5. This makes it possible for authenticated attackers, with subscriber-level access and abov...

CVSS:

4.3

Affected:

up to 1.3.5

Fixed in:

1.3.6

Disclosed:

Jul 24, 2023

CVE-2023-29237 on NVD →

The Freemius SDK for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘fs_request_get’ function in versions up to, and including, 2.5.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute...

CVSS:

6.1

Affected:

up to 1.2.1

Fixed in:

1.3

Disclosed:

Jul 18, 2023

CVE-2023-33999 on NVD →

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Affected:

up to 1.3

Fixed in:

1.3

CVE-2023-33999 on NVD →