VYPR

SM Page Duplicator

by WordPress

CVEs (1)

  • CVE-2026-16539Aug 3, 2026
    risk 0.00cvss epss 0.00

    The sm page duplicator WordPress plugin through 1.0.0 does not sanitise and escape a stored value before using it in a SQL statement when duplicating a page, allowing users with the Editor role and above to perform SQL Injection attacks.