CVE-2026-2489 | TP2WP Importer Plugin up to 1.1 on WordPress implode Watched domains cross site scripting

A vulnerability labeled as problematic has been found in TP2WP Importer Plugin up to 1.1 on WordPress. Impacted is the function implode. Executing a manipulation of the argument Watched domains can lead to cross site scripting.

This vulnerability is registered as CVE-2026-2489. It is possible to launch the attack remotely. No exploit is available.