What’s Vulnerable › Vulnerabilities

CVE-2016-10938

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-09-13 · updated 2026-06-17
• Weakness: CWE-352

Description

The copy-me plugin 1.0.0 for WordPress has CSRF for copying non-public posts to a public location.

Affected products

• Copy-Me Project Copy-Me: 1.0.0

References

• https://advisories.dxw.com/advisories/copy-me-vulnerable-to-csrf-allowing-unauthenticated-attacker-to-copy-posts/
• https://wordpress.org/plugins/copy-me/#developers
• https://wpvulndb.com/vulnerabilities/8706
• https://advisories.dxw.com/advisories/copy-me-vulnerable-to-csrf-allowing-unauthenticated-attacker-to-copy-posts/
• https://wordpress.org/plugins/copy-me/#developers
• https://wpvulndb.com/vulnerabilities/8706

Get alerted when CVE-2016-10938 or the next vulnerability affects your stack