CVE WATCH / VULNERABILITY DETAIL
CVE-2026-112243
MEDIUMCVSS 5.8NVD feed
Published 4 November 2026 · tracked since 4 November 2026
Description
The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not sanitise and escape a parameter before reflecting it on one of its administrative pages in certain configurations, leading to Reflected Cross-Site Scripting that executes in the session of a logged-i
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-97397 HIGH 7.2
- CVE-2026-59267 HIGH 7.8
- CVE-2026-114456 MEDIUM 6.5
- CVE-2026-121925 MEDIUM 6.6
- CVE-2026-104799 HIGH 8.8
- CVE-2026-90626 HIGH 7.3
- CVE-2026-90627 MEDIUM 5.5
- CVE-2026-90628 HIGH 7.3
- CVE-2026-90629 HIGH 7.3
- CVE-2026-90634 HIGH 7.3