Lucene search
+L

24 matches found

Nuclei
Nuclei
•added 2026/10/06 2:09 a.m.•82 views

WordPress XML Sitemap Generator for Google <2.0.4 - Cross-Site Scripting/Remote Code Execution

WordPress XML Sitemap Generator for Google plugin before 2.0.4 contains a cross-site scripting vulnerability that can lead to remote code execution. It does not validate a parameter which can be set to an arbitrary value, thus causing cross-site scripting via error message or remote code executio...

6.1CVSS7AI score0.02067EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/19 12:00 a.m.•2 views

CVE-2025-14076: Improper Neutralization of Input During Web Page Generation

The iXML – Google XML sitemap generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'iXMLemail' parameter in all versions up to, and including, 0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

6.1CVSS6AI score0.00265EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:46 a.m.•13 views

CVE-2022-0346

The XML Sitemap Generator for Google WordPress plugin before 2.0.4 does not validate a parameter which can be set to an arbitrary value, thus causing XSS via error message or RCE if allowurlinclude is turned on...

6.1CVSS6.5AI score0.02067EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:26 a.m.•19 views

CVE-2023-31089

Cross-Site Request Forgery CSRF vulnerability in Tradebooster Video XML Sitemap Generator.This issue affects Video XML Sitemap Generator: from n/a through 1.0.0...

8.8CVSS8.5AI score0.00324EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2023-35418

Malicious code in bioql PyPI...

8.8CVSS9.2AI score0.00324EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-15506

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.02067EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:41 a.m.•12 views

CVE-2024-55999

Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through = 2.0.6...

5.3CVSS7.2AI score0.00409EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/16 4:15 p.m.•30 views

CVE-2024-55999

Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through = 2.0.6...

5.3CVSS0.00409EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/16 3:53 p.m.•42 views

CVE-2024-55999 WordPress XML Multilanguage Sitemap Generator plugin <= 2.0.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilanguage Sitemap Generator: from n/a through = 2.0.6...

5.3CVSS0.00409EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/16 12:00 a.m.•14 views

PT-2024-36653 · Unknown · Marco Giannini Xml Multilanguage Sitemap Generator

Name of the Vulnerable Software and Affected Versions: Marco Giannini XML Multilanguage Sitemap Generator versions 2.0.6 and earlier Description: The issue is related to a missing authorization vulnerability in the Marco Giannini XML Multilanguage Sitemap Generator. This vulnerability affects the...

5.3CVSS6.8AI score0.00409EPSS
SaveExploits0References5
VulnCheck KEV
VulnCheck KEV
•added 2024/01/02 12:00 a.m.•13 views

VulnCheck KEV: CVE-2022-0346

The XML Sitemap Generator for Google WordPress plugin before 2.0.4 does not validate a parameter which can be set to an arbitrary value, thus causing XSS via error message or RCE if allowurlinclude is turned on...

6.1CVSS6.5AI score0.02067EPSS
SaveIn wildExploits1References348
Prion
Prion
•added 2023/11/18 11:15 p.m.•31 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Tradebooster Video XML Sitemap Generator.This issue affects Video XML Sitemap Generator: from n/a through 1.0.0...

6.8CVSS7.2AI score0.00324EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/18 10:38 p.m.•35 views

CVE-2023-31089 WordPress Video XML Sitemap Generator Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Tradebooster Video XML Sitemap Generator.This issue affects Video XML Sitemap Generator: from n/a through 1.0.0...

4.3CVSS8.9AI score0.00324EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/18 12:00 a.m.•3 views

CVE-2023-31089: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Tradebooster Video XML Sitemap Generator.This issue affects Video XML Sitemap Generator: from n/a through 1.0.0...

8.8CVSS8.2AI score0.00324EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/11/15 12:00 a.m.•20 views

The vulnerability of the XML Sitemap Generator plugin for the WordPress content management system allows attackers to execute XSS attacks.

The vulnerability of the XML Sitemap Generator plugin for the WordPress content management system exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...

6.4CVSS6.2AI score0.02067EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/11/12 11:37 p.m.•16 views

CVE-2023-26514 WordPress XML Sitemap Generator for Google Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPGrim Dynamic XML Sitemaps Generator for Google plugin = 1.3.3 versions...

5.4CVSS7.1AI score0.00301EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2023/02/28 12:00 a.m.•24 views

WordPress XML Sitemap Generator for Google Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software XML Sitemap Generator for Google Type Plugin Vulnerable versions = 1.3.3 Fixed in 1.3.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-26514 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID f206684cd2cf Credits Ri...

8.8CVSS7AI score0.00301EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2022/05/24 12:00 a.m.•229 views

WordPress XML Sitemap Generator Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress XML Sitemap Generator version 2.0.4 has a cross-site scripting vulnerability that can be exploited by attackers to conduct cross-site scriptin...

6.1CVSS1.9AI score0.02067EPSS
SaveExploits1References1
OSV
OSV
•added 2022/05/23 8:16 a.m.•16 views

CVE-2022-0346

The XML Sitemap Generator for Google WordPress plugin before 2.0.4 does not validate a parameter which can be set to an arbitrary value, thus causing XSS via error message or RCE if allowurlinclude is turned on...

6.1CVSS5.9AI score0.02067EPSS
SaveExploits1References1
Prion
Prion
•added 2022/05/23 8:16 a.m.•23 views

Design/Logic Flaw

The XML Sitemap Generator for Google WordPress plugin before 2.0.4 does not validate a parameter which can be set to an arbitrary value, thus causing XSS via error message or RCE if allowurlinclude is turned on...

4.3CVSS6AI score0.02067EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder