CVE-2024-13468

Summary

CVE-2024-13468 is a vulnerability affecting the Trash Duplicate and 301 Redirect plugin for WordPress. This issue allows unauthenticated attackers to delete arbitrary posts or pages due to a missed capability check on the 'duplicates-action-top' action. Versions up to and including 1.9 of the plugin are impacted. The lack of proper access control exposes websites to potential data loss risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.