Skip to content

Known CVE

Duplicate Page WordPress - Stored Cross-Site Scripting

Duplicate Page WordPress plugin <= 4.4.2 contains a stored cross-site scripting caused by unsanitized Duplicate Post Suffix settings in output, letting high privilege users execute malicious scripts, exploit requires high privilege user role.

CVE-2021-24681

Medium2021CVSS 4.8CWE-79

wpscan · cve2021 · wordpress · wp · wp-plugin · duplicate-page · xss · vuln

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website