The Duplicator – WordPress Migration Plugin WordPress plugin was affected by an installer.cleanup.php package Parameter XSS security vulnerability.
packetstormsecurity.com/files/122535/