PT-2019-7731

CVE-2016-10938

Published

2019-09-13

Updated

2019-09-13

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions copy-me plugin version 1.0.0

Description The issue concerns a CSRF problem in the copy-me plugin for WordPress, allowing non-public posts to be copied to a public location.

Recommendations For version 1.0.0, consider disabling the copy-me plugin until a patch is available to prevent exploitation of the CSRF issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾