plugin

Copy Me Vulnerabilities

4 known security issues reported for the Copy Me WordPress plugin. Most recent disclosed Dec 21, 2023.

1 medium

Running Copy Me on your site? Check whether your installed version is affected.

Scan your site free

copy-me [copy-me] < 1.0.1

unknown

Update the plugin. An unknown person discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress Copy Me Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. This vulnerability has been fixed in version...

Affected:
up to 1.0.1
Fixed in:
1.0.1
Disclosed:
Dec 21, 2023

copy-me [copy-me] <= 1.0.0 (unfixed)

unknown

[en] The copy-me plugin 1.0.0 for WordPress has CSRF for copying non-public posts to a public location.

Affected:
up to 1.0.0
Fix:
No patched version reported
Disclosed:
Sep 13, 2019

CVE-2016-10938 on NVD →

copy-me <= 1.0.0 - Missing Authorization & Cross-Site Request Forgery

medium

The copy-me plugin 1.0.0 for WordPress has CSRF for copying non-public posts to a public location. Edit: The affected function is called via an AJAX action, which makes the endpoint accessible to authenticated users so low level users such as subscribers can also copy posts.

CVSS:
5.4
Affected:
up to 1.0.0
Fix:
No patched version reported
Disclosed:
Dec 21, 2016

CVE-2016-10938 on NVD →

copy-me [copy-me] < 1.0.1

unknown

This plugin is prone to a cross site request forgery vulnerability. Update the plugin.

Affected:
up to 1.0.1
Fixed in:
1.0.1
Disclosed:
Dec 21, 2016

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database