Lucene search
K

48 matches found

RedhatCVE
RedhatCVE
added 2025/12/17 10:2 a.m.2 views

CVE-2025-64632

Missing Authorization vulnerability in Auctollo Google XML Sitemaps google-sitemap-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google XML Sitemaps: from n/a through = 4.1.22...

5.3CVSS5.9AI score0.00038EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/16 9:31 a.m.1 views

EUVD-2025-203595

Missing Authorization vulnerability in Auctollo Google XML Sitemaps google-sitemap-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google XML Sitemaps: from n/a through = 4.1.21...

5.3CVSS6.5AI score0.00038EPSS
Exploits0References2
NVD
NVD
added 2025/12/16 9:15 a.m.1 views

CVE-2025-64632

Missing Authorization vulnerability in Auctollo Google XML Sitemaps google-sitemap-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google XML Sitemaps: from n/a through = 4.1.22...

5.3CVSS0.00038EPSS
Exploits0References1
CVE
CVE
added 2025/12/16 8:12 a.m.9 views

CVE-2025-64632

The CVE-2025-64632 entry concerns the WordPress Google XML Sitemaps plugin with versions up to and including 4.1.21. The root cause is a missing authorization / broken access control, allowing exploitation due to incorrectly configured access levels. Public sources in the connected documents conf...

5.3CVSS5.9AI score0.00038EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/16 8:12 a.m.2 views

CVE-2025-64632 WordPress Google XML Sitemaps plugin <= 4.1.22 - Broken Access Control vulnerability

Missing Authorization vulnerability in Auctollo Google XML Sitemaps google-sitemap-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google XML Sitemaps: from n/a through = 4.1.22...

5.3CVSS5.1AI score0.00038EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.1 views

WordPress plugin Google XML Sitemaps 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A security...

5.3CVSS6.6AI score0.00038EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.3 views

PT-2025-51403

Name of the Vulnerable Software and Affected Versions Auctollo Google XML Sitemaps versions through 4.1.21 Description The Google XML Sitemaps application contains a flaw related to missing authorization. This allows exploitation of incorrectly configured access control security levels...

5.3CVSS6.5AI score0.00038EPSS
Exploits0References6
Patchstack
Patchstack
added 2025/10/31 3:54 p.m.4 views

WordPress Google XML Sitemaps plugin <= 4.1.22 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by NumeX in WordPress Plugin Google XML Sitemaps versions = 4.1.22...

5.3CVSS7AI score0.00038EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-12000

Malware in sbrugna...

4.8CVSS4.9AI score0.00206EPSS
Exploits2References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-8056

Malware in sbrugna...

4.8CVSS5.1AI score0.0015EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-30311

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00051EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:24 p.m.3 views

CVE-2021-25088

The XML Sitemaps WordPress plugin before 4.1.3 does not sanitise and escape a settings before outputting it in the Debug page, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.9AI score0.00206EPSS
Exploits2References1
OSV
OSV
added 2023/11/13 12:15 a.m.1 views

CVE-2023-26514

Cross-Site Request Forgery CSRF vulnerability in WPGrim Dynamic XML Sitemaps Generator for Google plugin = 1.3.3 versions...

8.8CVSS7.3AI score
Exploits0References1
Prion
Prion
added 2023/11/13 12:15 a.m.10 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WPGrim Dynamic XML Sitemaps Generator for Google plugin = 1.3.3 versions...

6.8CVSS7.6AI score0.00051EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/11/12 11:37 p.m.46 views

CVE-2023-26514

CVE-2023-26514 is a CSRF vulnerability in the WordPress plugin WPGrim Dynamic XML Sitemaps Generator for Google (versions

8.8CVSS7.2AI score0.00051EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/12 12:0 a.m.1 views

PT-2023-20693 · WordPress · Wpgrim Dynamic Xml Sitemaps Generator

Name of the Vulnerable Software and Affected Versions: WPGrim Dynamic XML Sitemaps Generator for Google plugin versions prior to 1.3.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing...

8.8CVSS8.6AI score0.00051EPSS
Exploits0References2
CNVD
CNVD
added 2022/06/22 12:0 a.m.21 views

WordPress plugin XML Sitemaps跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions prior to WordPress plugin XML Sitemaps 4.1.3,...

4.8CVSS1AI score0.00206EPSS
Exploits2References1
OSV
OSV
added 2022/06/20 11:15 a.m.1 views

CVE-2021-25088

The XML Sitemaps WordPress plugin before 4.1.3 does not sanitise and escape a settings before outputting it in the Debug page, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.8AI score0.00206EPSS
Exploits2References1
NVD
NVD
added 2022/06/20 11:15 a.m.8 views

CVE-2021-25088

The XML Sitemaps WordPress plugin before 4.1.3 does not sanitise and escape a settings before outputting it in the Debug page, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS0.00206EPSS
Exploits2References1
Prion
Prion
added 2022/06/20 11:15 a.m.10 views

Cross site scripting

The XML Sitemaps WordPress plugin before 4.1.3 does not sanitise and escape a settings before outputting it in the Debug page, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

3.5CVSS4.8AI score0.00206EPSS
Exploits2References1Affected Software1
Rows per page
Query Builder