WordPress Cherry Team Members plugin <=1.4.1 - Authenticated Information Disclosure Vulnerability

WordPress Cherry Team Members plugin makes the function duplicate_post_as_draft() available to anyone logged in through the admin_action action.

Solution

           Update the plugin.