Inisev Copy & Delete Posts vulnerabilities

1 vulnerability

Known vulnerabilities in Inisev Copy & Delete Posts, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.1HighCVE-2026-53738inisev · copy & delete postsCopy & Delete Posts through 1.5.4 Privilege Escalation via cdp_action_handling HandlerCopy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp_action_handling AJAX handler. Attackers with an enabled role can delete posts or overwrite plugin settings via the f parameter, bypassing per-function capability checks.EPSS0.44%