Approved changes feed: RSS · Atom

cpe:2.3:a:solwininfotech:trash_duplicate_and_301_redirect:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSolwininfotech (a06dab3c-02f7-5c03-8acd-dc97ff56b199)
ProductTrash Duplicate And 301 Redirect (147b087d-ada7-55d8-9a1a-e1b4db37e825)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-62122 vulnerable 2026-06-08 07:37:28.673996 WordPress Trash Duplicate and 301 Redirect plugin <= 1.9.1 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in solwininfotech Trash Duplicate and 301 Redirect trash-duplicate-and-301-redirect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trash Duplicate and 301 Redirect: from n/a through <= 1.9.1.
Published: 2025-12-31T15:38:08.774Z
Updated: 2026-04-28T16:14:02.247Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13468 vulnerable 2026-06-08 06:25:37.753006 Trash Duplicate and 301 Redirect <= 1.9 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
HIGH (7.5)
The Trash Duplicate and 301 Redirect plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'duplicates-action-top' action in all versions up to, and including, 1.9. This makes it possible for unauthenticated attackers to delete arbitrary posts/pages.
Published: 2025-02-19T07:32:14.346Z
Updated: 2026-04-08T17:31:16.674Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.