Vulnerabilities

TI-2025-18394 CVE-2025-24677 · GHSA-xxjw-mqrg-2r3c

Code injection in wpspin Post/Page Copying Tool

MEDIUM 43

Improper Control of Generation of Code ('Code Injection') vulnerability in wpspin Post/Page Copying Tool postpage-import-export-with-custom-fields-taxonomies allows Remote Code Inclusion.This issue affects Post/Page Copy…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00505 Published 2025-02-04 No fix listed CWE-94

TI-2024-37269 CVE-2024-56300 · GHSA-pjwp-p686-rpwj

WordPress Post/Page Copying Tool plugin <= 2.0.0 - Sensitive Data Exposure vulnerability

MEDIUM 40

Insertion of Sensitive Information Into Sent Data vulnerability in wpspin Post/Page Copying Tool postpage-import-export-with-custom-fields-taxonomies allows Retrieve Embedded Sensitive Data.This issue affects Post/Page C…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00551 Published 2025-01-07 No fix listed CWE-201

Vulnerabilities

Filters

Code injection in wpspin Post/Page Copying Tool

WordPress Post/Page Copying Tool plugin <= 2.0.0 - Sensitive Data Exposure vulnerability