Ashish Ajani
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Simple HTML Sitemap | 4 | – | Apr 8, 2026 |
| Contact Form vCard Generator | 2 | – | Apr 17, 2025 |
| WordPress Simple HTML Sitemap | 2 | – | Nov 8, 2023 |
| WP Church Donation | 1 | – | Mar 31, 2025 |
| WP Copy Media URL | 1 | – | Mar 31, 2025 |
| WP Show Stats | 1 | – | Apr 9, 2025 |
Exploited and recent CVEs
- CVE-2026-39654 WordPress WP Simple HTML Sitemap plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-39521 WordPress Contact Form vCard Generator plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-32678 WordPress WP Show Stats plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2025-31582 WordPress Contact Form vCard Generator plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-31822 WordPress WordPress Simple HTML Sitemap plugin <= 3.4 - Broken Access Control vulnerability 0.6%
- CVE-2025-31583 WordPress WP Copy Media URL plugin <= 2.1 - CSRF to Stored XSS vulnerability 0.1%
- CVE-2025-31410 WordPress WP Church Donation plugin <= 1.7 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
- CVE-2023-49850 WordPress WP Simple HTML Sitemap plugin <= 2.7 - Broken Access Control vulnerability 0.4%
- CVE-2024-32574 WordPress WP Simple HTML Sitemap plugin <= 2.8 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2023-46627 WordPress WP Simple HTML Sitemap Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS) 0.5%
- CVE-2023-45067 WordPress WP Simple HTML Sitemap Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS) 0.4%