Data deletion via missing nonce validation

CSRF in Restore Permanently delete Post or Page Data 1.0 and earlier allows remote attackers to delete data via forged requests. The rp_dpo_dpa_ajax_dp_delete_data() function performs the deletion without valid WordPress nonce verification, accepting requests originating outside the administrative session. Exploitation requires an authenticated site administrator to follow a malicious link or perform an equivalent attacker-chosen action; no confidentiality or service-interruption impact is reported.