EUVD-2026-52182

The sm page duplicator WordPress plugin through 1.0.0 does not sanitise and escape a stored value before using it in a SQL statement when duplicating a page, allowing users with the Editor role and above to perform SQL Injection attacks...

WordPress Page Duplicator Plugin <= 0.1.1 is vulnerable to Broken Access Control

Software Page Duplicator Type Plugin Vulnerable versions = 0.1.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1368 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 7dc90907c1cd Credits Lucio Sá Required privilege...