Description
The copy-me plugin 1.0.0 for WordPress has CSRF for copying non-public posts to a public location.
References (3)
Core 3
Core References
Exploit, Third Party Advisory x_refsource_misc
https://wpvulndb.com/vulnerabilities/8706
Product x_refsource_misc
https://wordpress.org/plugins/copy-me/#developers
Exploit, Third Party Advisory x_refsource_misc
https://advisories.dxw.com/advisories/copy-me-vulnerable-to-csrf-allowing-unauthenticated-attacker-to-copy-posts/
Scores
CVSS v3
6.5
EPSS
0.0086
EPSS Percentile
54.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Details
CWE
CWE-352
Status
published
Products (1)
copy-me_project/copy-me
1.0.0
Published
Sep 13, 2019
Tracked Since
Feb 18, 2026