Etruel WP Delete Post Copies vulnerabilities
2 vulnerabilities
Known vulnerabilities in Etruel WP Delete Post Copies, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-22541etruelwp delete post copies+1
EPSS score0.45%
Missing Authorization vulnerability in etruel WP Delete Post Copies etruel-del-post-copies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Delete Post Copies: from n/a through <= 5.5.CVE-2025-12066etruelwp delete post copies+1EPSS score0.18%
The WP Delete Post Copies plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 6.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.