Approved changes feed: RSS · Atom

cpe:2.3:a:etruel:wp_delete_post_copies:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEtruel (94213e96-49a3-5a2e-83e8-8412c9159315)
ProductWp Delete Post Copies (cea5f3f3-683b-5700-b0c3-7d7882339cb5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-22541 vulnerable 2026-06-08 07:10:53.365695 WordPress WP Delete Post Copies plugin <= 5.5 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in etruel WP Delete Post Copies etruel-del-post-copies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Delete Post Copies: from n/a through <= 5.5.
Published: 2025-01-07T14:57:23.609Z
Updated: 2026-04-28T16:11:01.194Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12066 vulnerable 2026-06-08 07:04:29.637086 WP Delete Post Copies <= 6.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
MEDIUM (4.4)
The WP Delete Post Copies plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 6.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
Published: 2025-11-21T09:27:00.990Z
Updated: 2026-04-08T17:09:30.331Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.