WPSpins Post/Page Copying Tool Remote Code Execution Vulnerability

Vulnerability

A code injection vulnerability allowing remote code execution has been identified in the WPSpins Post/Page Copying Tool, specifically in versions through 2.0.3. This vulnerability arises from improper control over code generation, leading to remote code inclusion.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected website, potentially leading to unauthorized access and control over the site.

Remediation

Users of the WPSpins Post/Page Copying Tool should update to version 2.0.4 or later. Patchstack users can enable auto-update for vulnerable plugins.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
3.4
impact
10.0
exploitability
5.4
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.