Freelancer Coder

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-7385 Sep 25, 04:15 HIGH PATCH This Week

The WordPress Simple HTML Sitemap plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 3.1 due to insufficient escaping on the user. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

WordPress SQLi Wordpress Plugin Wordpress Simple Html Sitemap Freelancer Coder

NVD

CVSS 3.1

7.2

EPSS

1.4%

CVE-2023-46627 Nov 08, 16:15 HIGH This Week

A vulnerability in Ashish Ajani WP Simple HTML Sitemap wp-simple-html-sitemap.2. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin Wordpress Simple Html Sitemap Freelancer Coder

NVD

CVSS 3.1

7.1

EPSS

0.3%

CVE-2023-45067 Oct 18, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Simple Html Sitemap Freelancer Coder

NVD

CVSS 3.1

5.4

EPSS

0.3%

CVE-2024-7385

EPSS 1% CVSS 7.2

HIGH PATCH This Week

WordPress SQLi Wordpress Plugin +2

NVD

CVE-2023-46627

EPSS 0% CVSS 7.1

HIGH This Week

WordPress XSS Wordpress Plugin +2

NVD

CVE-2023-45067

EPSS 0% CVSS 5.4

MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Simple Html Sitemap +1

NVD