CVE-2026-4298: Missing Authorization

The DSGVO All in one for WP plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 4.9. This is due to the dsgvoresetpolicyservicefunc function lacking both capability checks and nonce verification while processing user-supplied parameters to reset plugin...

PT-2024-14970

Name of the Vulnerable Software and Affected Versions The Simple Sitemap – Create a Responsive HTML Sitemap plugin for WordPress versions up to, and including, 3.5.13 Description The issue is due to missing or incorrect nonce validation in the 'admin notices' hook found in class-settings.php. Thi...

CVE-2023-6492: Cross-Site Request Forgery (CSRF)

The Simple Sitemap – Create a Responsive HTML Sitemap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.5.13. This is due to missing or incorrect nonce validation in the 'adminnotices' hook found in class-settings.php. This makes it possible...