PT-2025-3263 · WordPress · Wpspins Post/Page Copying Tool

Stealthcopter · Published 2025-01-07 · Updated 2025-01-07 · CVE-2024-56300

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions WPSpins Post/Page Copying Tool versions n/a through 2.0.0

Description The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. This can lead to the exposure of confidential information.

Recommendations For versions n/a through 2.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2024-56300

Affected Products

Wpspins Post/Page Copying Tool

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-56300 · Security Note
• https://twitter.com/CVEnew/status/1876587698422509874 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/postpage-import-export-with-custom-fields-taxonomies/vulnerability/wordpress-post-page-copying-tool-plugin-2-0-0-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/1876705848262611383 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/postpage-import-export-with-custom-fields-taxonomies/vulnerability/wordpress-post-page-copying-tool-plugin-2-0-0-sensitive-data-exposure-vulnerability?_s_id=cve · Note