Vulnerabilities

TI-2025-12862 CVE-2025-14076 · GHSA-fr28-xgc9-rqcr

iXML – Google XML sitemap generator <= 0.6 - Reflected Cross-Site Scripting via 'iXML_email' Parameter

LOW 27

The iXML – Google XML sitemap generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'iXML_email' parameter in all versions up to, and including, 0.6 due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00295 Published 2026-02-19 No fix listed CWE-79

TI-2025-33262 CVE-2025-53295 · GHSA-3c2h-wqwf-4hjq

WordPress iCount Payment Gateway plugin <= 2.0.7 - Broken Access Control Vulnerability

LOW 30

Missing Authorization vulnerability in iCount iCount Payment Gateway icount allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects iCount Payment Gateway: from n/a through <= 2.0.7.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00301 Published 2025-06-27 No fix listed CWE-862

Vulnerabilities

Filters

iXML – Google XML sitemap generator <= 0.6 - Reflected Cross-Site Scripting via 'iXML_email' Parameter

WordPress iCount Payment Gateway plugin <= 2.0.7 - Broken Access Control Vulnerability