WordPress plugin
Copy or Move Comments security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High2
- Medium1
- Low0
All Copy or Move Comments vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Subscriber+) SQL Injection ≤5.0.4No patch available | CVE-2023-28748 | |
| High8.8 | Cross-Site Scripting and SQL Injection <1.0.1Update to 1.0.1 | — |
- High8.8Authenticated (Subscriber+) SQL Injection
≤5.0.4No patch available
- High8.8Cross-Site Scripting and SQL Injection
<1.0.1Update to 1.0.1
Copy or Move Comments: common questions
Does Copy or Move Comments have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Copy or Move Comments: 2 high, 1 medium. At least one is not fixed in the latest version.
How do I check which version of Copy or Move Comments I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Copy or Move Comments vulnerability?
CVE-2023-45634, published Oct 11, 2023: Copy Or Move Comments <= 5.0.4 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any Copy or Move Comments vulnerability listed in CISA KEV?
No. None of the known Copy or Move Comments vulnerabilities is currently listed in the CISA KEV catalog.