CVE-2025-14076

The iXML – Google XML sitemap generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'iXMLemail' parameter in all versions up to, and including, 0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2025-48303

CVE-2025-48303 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Post Type Converter (versions up to 0.6). The entry lists a CVSS v3.1 base score of 4.3 (Medium) with vectors: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. Connected sources corroborate the CSRF flaw and no...

WordPress Get Posts plugin <= 0.6 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin Get Posts versions = 0.6...

WordPress Sensly Online Presence plugin <= 0.6 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Vo Hoang Phuc in WordPress Plugin Sensly Online Presence versions = 0.6...