LangChain < 0.2.5 DoS

The version of LangChain installed on the remote host is prior to 0.2.5. It is, therefore, affected by a Denial-of-Service DoS vulnerability in the SitemapLoader class. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion...

CVE-2025-22342

Cross-Site Request Forgery CSRF vulnerability in Jenst WP Simple Sitemap wp-simple-sitemap allows Stored XSS.This issue affects WP Simple Sitemap: from n/a through = 0.2...

CVE-2025-22342 WordPress WP Simple Sitemap plugin <= 0.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jens Törnell WP Simple Sitemap allows Stored XSS.This issue affects WP Simple Sitemap: from n/a through 0.2...

CVE-2025-22342

CVE-2025-22342 affects the WordPress plugin WP Simple Sitemap. The connected sources describe a Cross-Site Request Forgery (CSRF) vulnerability that leads to stored XSS in WP Simple Sitemap versions up to 0.2 (from n/a through 0.2). Exploitation details, affected product/version ranges beyond thi...

CVE-2025-22342 WordPress WP Simple Sitemap plugin <= 0.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jenst WP Simple Sitemap wp-simple-sitemap allows Stored XSS.This issue affects WP Simple Sitemap: from n/a through = 0.2...

PT-2025-4456 · WordPress · Wp Simple Sitemap

Name of the Vulnerable Software and Affected Versions: WP Simple Sitemap versions n/a through 0.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...

WordPress WP Simple Sitemap plugin <= 0.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin WP Simple Sitemap versions = 0.2...

MAL-2024-12136 Malicious code in plugin-sitemap-coveo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8beb57037c74f45d85a7de2e8df9f414b56d2cece15a8004db4ebda4d5400ff6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in plugin-sitemap-coveo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8beb57037c74f45d85a7de2e8df9f414b56d2cece15a8004db4ebda4d5400ff6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-55999

Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through = 2.0.6...

CVE-2024-55999 WordPress XML Multilanguage Sitemap Generator plugin <= 2.0.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through = 2.0.6...

CVE-2024-55999 WordPress XML Multilanguage Sitemap Generator plugin <= 2.0.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through = 2.0.6...

PT-2024-36653 · Unknown · Marco Giannini Xml Multilanguage Sitemap Generator

Name of the Vulnerable Software and Affected Versions: Marco Giannini XML Multilanguage Sitemap Generator versions 2.0.6 and earlier Description: The issue is related to a missing authorization vulnerability in the Marco Giannini XML Multilanguage Sitemap Generator. This vulnerability affects the...

WordPress XML Multilanguage Sitemap Generator plugin <= 2.0.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin XML Multilanguage Sitemap Generator versions = 2.0.6...

PT-2024-17212 · WordPress · Kvcore Idx Plugin

Name of the Vulnerable Software and Affected Versions: kvCORE IDX plugin for WordPress versions up to, and including, 2.3.35 Description: The issue is related to Reflected Cross-Site Scripting, which occurs due to insufficient input sanitization and output escaping. This allows unauthenticated...

PT-2024-13819 · Ashish Ajani · Wp Simple Html Sitemap

Name of the Vulnerable Software and Affected Versions: Ashish Ajani WP Simple HTML Sitemap versions 2.7 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For...

Malicious code in bitdefender-sitemap-creator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7295547491c683880b2a5219679629caebf543d6787c220aa1abcca681af64f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11314 Malicious code in bitdefender-sitemap-creator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7295547491c683880b2a5219679629caebf543d6787c220aa1abcca681af64f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Slick Sitemap plugin <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Slick Sitemap versions = 2.0.0...

CVE-2024-11424

The Slick Sitemap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slick-sitemap' shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...