Priority LOW 26
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashish Ajani WP Simple HTML Sitemap wp-simple-html-sitemap allows DOM-Based XSS.This issue affects WP Simple HTML Site…
CVSS 3.1MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00179 · Published 2026-04-08 · No fix listed CWE-79
Priority LOW 30
The Contact Form vCard Generator plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wp_gvccf_check_download_request' function in all versions up to, and including,…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00349 · Published 2026-01-09 · No fix listed CWE-862
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashish Ajani Contact Form vCard Generator contact-form-vcard-generator allows Reflected XSS.This issue affects Contact…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00293 · Published 2025-04-17 · No fix listed CWE-79
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in Ashish Ajani WP Show Stats wp-show-stats allows Cross Site Request Forgery.This issue affects WP Show Stats: from n/a through <= 1.5.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00195 · Published 2025-04-09 · No fix listed CWE-352
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashish Ajani Contact Form vCard Generator contact-form-vcard-generator allows Stored XSS.This issue affects Contact Fo…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00299 · Published 2025-04-03 · No fix listed CWE-79
Priority LOW 31
Missing Authorization vulnerability in Ashish Ajani WP Simple HTML Sitemap wp-simple-html-sitemap allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Simple HTML Sitemap: from n/…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0059 · Published 2025-04-01 · No fix listed CWE-862
Priority LOW 30
Cross-Site Request Forgery (CSRF) vulnerability in Ashish Ajani WP Copy Media URL wp-copy-media-url allows Stored XSS.This issue affects WP Copy Media URL: from n/a through <= 2.1.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00146 · Published 2025-03-31 · No fix listed CWE-352
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in Ashish Ajani WP Church Donation wp-church-donation allows Cross Site Request Forgery.This issue affects WP Church Donation: from n/a through <= 1.7.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00147 · Published 2025-03-31 · No fix listed CWE-352
Priority LOW 38
The WP Church Donation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several donation form submission parameters in all versions up to, and including, 1.7 due to insufficient input sanitization an…
CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.00364 · Published 2025-03-25 · No fix listed CWE-79
Priority LOW 30
Missing Authorization vulnerability in Ashish Ajani WP Simple HTML Sitemap allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Simple HTML Sitemap: from n/a through 2.7.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00381 · Published 2024-12-09 · No fix listed CWE-862
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashish Ajani WP Simple HTML Sitemap allows Reflected XSS.This issue affects WP Simple HTML Sitemap: from n/a through 2…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00394 · Published 2024-04-18 · No fix listed CWE-79