exploitDog

CVE-2016-10938

Опубликовано: 13 сент. 2019

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

The copy-me plugin 1.0.0 for WordPress has CSRF for copying non-public posts to a public location.

Ссылки

https://advisories.dxw.com/advisories/copy-me-vulnerable-to-csrf-allowing-unauthenticated-attacker-to-copy-posts/
Exploit
Third Party Advisory
https://wordpress.org/plugins/copy-me/#developers
Product
https://wpvulndb.com/vulnerabilities/8706
Exploit
Third Party Advisory
https://advisories.dxw.com/advisories/copy-me-vulnerable-to-csrf-allowing-unauthenticated-attacker-to-copy-posts/
Exploit
Third Party Advisory
https://wordpress.org/plugins/copy-me/#developers
Product
https://wpvulndb.com/vulnerabilities/8706
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:copy-me_project:copy-me:1.0.0:*:*:*:*:wordpress:*:*

EPSS

Процентиль: 32%

0.00123

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-qhg7-26q2-q32q

github

больше 3 лет назад

The copy-me plugin 1.0.0 for WordPress has CSRF for copying non-public posts to a public location.

EPSS

Процентиль: 32%

0.00123

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352