WP Copy Media URL

WP Copy Media URL has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for WP Copy Media URL has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Abdi Pranata. WP Copy Media URL is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.4.10.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all WP Copy Media URL vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-31583

WP Copy Media URL <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
WP Copy Media URL banner
Latestv2.1

WP Copy Media URL

Ashish Ajani

Author

Ashish Ajani

5.0(5)
100/100
Last Updated
2024-02-21 (3y ago)
Active Installs
200+
Downloads
6,321
Requires WP
4.7+
Requires PHP
7.4+
Tested up to
WP 6.4.10
Created
2018-03-28 (9y ago)

Often we need to copy URL of any media (image, video, document, etc…) and for that we have to go to the media library and copy URL from the input. This WordPress plugin will make this process easier by providing a button to copy media URL by just a single click. Once the plugin installed, button will appear in Media Grid View, Media List View, Attachment Details popup, Add Media while add/edit post/page and Edit Media. Features: Overview Copy Media URL from media listing view and grid view Copy Media URL from edit media page Copy Media URL when upload new media Copy Media URL from media details popup This plugin provides settings to set copy button color and copy button text. For further information on plugin or suggestions/comments on how to customize the plugin please feel free to connect with me https://freelancer-coder.com/contact-wordpress-developer/.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C