UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-112243
The Duplicator WordPress plugin before 5.1.0, duplicator-pro WordPress plugin before 5.1.0 does not sanitise and escape a parameter before reflecting it on one of its administrative pages in certain configurations, leading to Reflected Cross-Site Scripting that executes in the session of a logged-in administrator who is tricked into opening a crafted link.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-04T09:33:16.411751+00:00
- Cve id
- CVE-2026-112243
- First seen by Signal
- 2026-11-04T09:34:19+00:00
- Retrieved at
- 2026-11-04T09:34:19+00:00
- Published at
- 2026-11-04T06:16:58.913
- Last modified
- 2026-11-04T06:16:58.913
Explore deeper with Ninja Signal's threat intelligence graph