CVE-2026-16539: SM Page Duplicator <= 1.0.0 - Editor+ SQL Injection via Page Duplication

Q: What is the severity of CVE-2026-16539?

CVE-2026-16539 has a severity rating of 8.1 on the CVSS scale, indicating a high risk.

Q: How do I fix CVE-2026-16539?

To fix CVE-2026-16539, update the SM Page Duplicator plugin to version 1.0.1 or later.

Q: Who is affected by CVE-2026-16539?

CVE-2026-16539 affects users with Editor roles and above who utilize the SM Page Duplicator plugin on WordPress.

Q: What kind of attack can be performed using CVE-2026-16539?

CVE-2026-16539 allows for SQL Injection attacks through the duplication of pages.

Q: What systems are vulnerable to CVE-2026-16539?

CVE-2026-16539 specifically affects WordPress sites running the SM Page Duplicator plugin version 1.0.0 or earlier.

Published Aug 3, 2026

Updated

The sm page duplicator WordPress plugin through 1.0.0 does not sanitise and escape a stored value before using it in a SQL statement when duplicating a page, allowing users with the Editor role and above to perform SQL Injection attacks.

Affected Software

1 affected component

WordPress SM Page Duplicator<=1.0.0

Event History

Aug 3, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Data Sourced

via NVD·07:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-16539?

CVE-2026-16539 has a severity rating of 8.1 on the CVSS scale, indicating a high risk.

How do I fix CVE-2026-16539?

To fix CVE-2026-16539, update the SM Page Duplicator plugin to version 1.0.1 or later.

Who is affected by CVE-2026-16539?

CVE-2026-16539 affects users with Editor roles and above who utilize the SM Page Duplicator plugin on WordPress.

What kind of attack can be performed using CVE-2026-16539?

CVE-2026-16539 allows for SQL Injection attacks through the duplication of pages.

What systems are vulnerable to CVE-2026-16539?

CVE-2026-16539 specifically affects WordPress sites running the SM Page Duplicator plugin version 1.0.0 or earlier.

CVE-2026-16539: SM Page Duplicator <= 1.0.0 - Editor+ SQL Injection via Page Duplication

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-16539?

How do I fix CVE-2026-16539?

Who is affected by CVE-2026-16539?

What kind of attack can be performed using CVE-2026-16539?

What systems are vulnerable to CVE-2026-16539?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-16539?

How do I fix CVE-2026-16539?

Who is affected by CVE-2026-16539?

What kind of attack can be performed using CVE-2026-16539?

What systems are vulnerable to CVE-2026-16539?