WordPress Remove Duplicate Posts plugin <= 1.3.5 - Broken Access Control vulnerability

CVE-2023-29237

What is CVE-2023-29237?

A vulnerability exists in Muhammad Rehman’s Remove Duplicate Posts plugin where insufficient access controls can be exploited. This flaw allows malicious users to bypass authentication mechanisms due to incorrectly configured security levels. Any version of the plugin prior to 1.3.5 is susceptible, posing a risk to WordPress installations that utilize this tool for managing duplicate posts. Effective patching is required to ensure that only authorized users can configure access settings.

References