WordPress security by component
WP Simple HTML Sitemap
Plugin description
WP Simple HTML Sitemap is a WordPress component with 7 published CVE records in this archive. The latest tracked vulnerability was published Apr 08, 2026; the highest CVE/CNA score is 9.1.
Plugin slug:
wp-simple-html-sitemapLatest vulnerability
CVE-2026-39654: WP Simple HTML Sitemap: Cross-site scripting
WP Simple HTML Sitemap is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 3.8.
| Safe version |
|
||
|---|---|---|---|
| Apr 08, 2026 |
CVE-2026-39654
WP Simple HTML Sitemap: Cross-site scripting
WP Simple HTML Sitemap is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 3.8.
|
> 3.8 |
CVE5.9
NVDPending
|
| Apr 01, 2025 |
CVE-2025-31822
WP Simple HTML Sitemap: A security weakness
WP Simple HTML Sitemap is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Dec 09, 2024 |
CVE-2023-49850
WP Simple HTML Sitemap: A security weakness
WP Simple HTML Sitemap is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Sep 25, 2024 |
CVE-2024-7385
WordPress Simple HTML Sitemap: SQL injection
WordPress Simple HTML Sitemap is affected by SQL injection. Exploitation requires at least administrator-level access. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE9.1
NVD7.2
|
| Apr 18, 2024 |
CVE-2024-32574
WP Simple HTML Sitemap: Cross-site scripting
WP Simple HTML Sitemap is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE7.1
NVDPending
|
| Nov 08, 2023 |
CVE-2023-46627
Wp Simple Html Sitemap: Cross-site scripting
Wp Simple Html Sitemap is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE7.1
NVD6.1
|
| Oct 18, 2023 |
CVE-2023-45067
Wp Simple Html Sitemap: Cross-site scripting
Wp Simple Html Sitemap is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVD5.4
|