Vulnerabilities

TI-2024-06845 CVE-2024-7385 · GHSA-cwc9-j2pg-9jgm

WordPress Simple HTML Sitemap <= 3.1 - Authenticated (Admin+) SQL Injection

MEDIUM 44

The WordPress Simple HTML Sitemap plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 3.1 due to insufficient escaping on the user supplied parameter and lack…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01386 Published 2024-09-25 No fix listed CWE-89

TI-2023-25129 CVE-2023-46627 · GHSA-fc42-2hhg-7r35

WordPress WP Simple HTML Sitemap Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

LOW 32

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ashish Ajani WordPress Simple HTML Sitemap plugin <= 2.1 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00476 Published 2023-11-08 No fix listed CWE-79

TI-2023-24115 CVE-2023-45067 · GHSA-cc6j-mm94-2h5g

WordPress WP Simple HTML Sitemap Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Ashish Ajani WordPress Simple HTML Sitemap plugin <= 2.1 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00361 Published 2023-10-18 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Simple HTML Sitemap <= 3.1 - Authenticated (Admin+) SQL Injection

WordPress WP Simple HTML Sitemap Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

WordPress WP Simple HTML Sitemap Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)