Vendors / Freelancer-coder Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Freelancer-coder records in CISA KEV No Freelancer-coder vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 44
The WordPress Simple HTML Sitemap plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 3.1 due to insufficient escaping on the user supplied parameter and lack…
CVSS 3.1 CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.01386 · Published 2024-09-25 · No fix listed CWE-89
Priority LOW 32
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ashish Ajani WordPress Simple HTML Sitemap plugin <= 2.1 versions.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00476 · Published 2023-11-08 · No fix listed CWE-79
Priority LOW 29
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Ashish Ajani WordPress Simple HTML Sitemap plugin <= 2.1 versions.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00361 · Published 2023-10-18 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical1 High1 Medium1 Low0 No CVSS0