Delete Duplicate Posts
Delete Duplicate Posts has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2023; all 4 are fixed as of October 2026. Their average CVSS score is 6.7, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2023 was the busiest year with 2 disclosures.
The most common weakness is Missing Authorization, behind 3 of the records (75%). Other recurring categories include Cross-Site Scripting.
Every one of the 4 issues recorded for Delete Duplicate Posts has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Delete Duplicate Posts is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Read the full analysisVulnerability Records

Delete Duplicate Posts
Author
Lars Koudal
Delete Duplicate Posts helps you declutter your WordPress site by removing duplicate posts along with their metadata. Whether you choose to run the cleanup process manually or set it to operate automatically on a schedule, our plugin ensures a thorough cleanup, improving your website’s loading speed and overall performance. Why Choose Delete Duplicate Posts? Comprehensive Cleanup: Not just posts or pages, but also any Custom Post Type you have enabled, along with all related metadata. Space Efficiency: By eliminating unnecessary duplicates, it frees up space, facilitating better website performance. Scalability: Designed for websites of all sizes, it efficiently manages and optimizes large-scale websites without causing timeouts. Features Find duplicates on posts, pages, and custom post types—then decide what stays. Included free Review matches before anything is removed, with clear keep vs remove labels. Match by post title; choose whether to keep the oldest or newest post. Move duplicates to the WordPress trash by default (recoverable). Protect specific post IDs so they are never deleted. See date and author on each post in a duplicate pair. Run cleanup manually, or schedule scans that only report what would be removed—or delete on a schedule when you are ready. Optional status emails and a full activity log of what the plugin did. Pro unlocks Find duplicates by identical post content, excerpt, or any custom field—not only titles. Include drafts, scheduled, private, and other post statuses in the scan. Delete permanently when trash is not enough. Preserve removed URLs with 301 redirects using built-in storage or the Redirection plugin. The Redirects tab lists only built-in redirects. When Redirection is selected, new redirects are created in its group and are not listed here. Experience its Efficiency Our plugin’s unique approach to handling large datasets ensures that your website remains operational and improves progressively. By removing a few posts at a time, the plugin prevents site timeouts and enhances your website’s performance seamlessly. For a cleaner, smoother, and more efficient WordPress site, Delete Duplicate Posts is the solution you need. Learn more about the plugin and its features. Eliminate duplicate posts, pages, and custom post types with Delete Duplicate Posts. Review matches, keep the version you want, and clean up manually or on a schedule—with trash-first defaults so mistakes are recoverable. How can I report security bugs? You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. Report a security vulnerability.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C