PT-2026-67113 · Undefined · Undefined

CVE-2026-16539 · Publicado 2026-08-03 · Atualizado 2026-08-03

Mitre

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

The sm page duplicator WordPress plugin through 1.0.0 does not sanitise and escape a stored value before using it in a SQL statement when duplicating a page, allowing users with the Editor role and above to perform SQL Injection attacks.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-16539

Produtos afetados

Undefined

Referências · 2

• 🔥 https://wpscan.com/vulnerability/8e2c97d8-5392-4464-94e5-3fc353302f1f · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-16539 · Nota de Segurança