CVE-2016-10938

The copy-me plugin 1.0.0 for WordPress has CSRF for copying non-public posts to a public location.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2019-09-13

Last modified

2024-08-06

Weaknesses

CWE-352

Affected products

• Copy-me (Copy-me Project)

References

• https://advisories.dxw.com/advisories/copy-me-vulnerable-to-csrf-allowing-unauthenticated-attacker-to-copy-posts/
• https://wordpress.org/plugins/copy-me/#developers
• https://wpvulndb.com/vulnerabilities/8706