Ashish Ajani

Products

ProductCVEsExploitedLatest
WP Simple HTML Sitemap4–Apr 8, 2026
Contact Form vCard Generator2–Apr 17, 2025
WordPress Simple HTML Sitemap2–Nov 8, 2023
WP Church Donation1–Mar 31, 2025
WP Copy Media URL1–Mar 31, 2025
WP Show Stats1–Apr 9, 2025

Exploited and recent CVEs

  • CVE-2026-39654 Medium 5.9 WordPress WP Simple HTML Sitemap plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-39521 High 7.1 WordPress Contact Form vCard Generator plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-32678 Medium 4.3 WordPress WP Show Stats plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2025-31582 High 7.1 WordPress Contact Form vCard Generator plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-31822 Medium 5.3 WordPress WordPress Simple HTML Sitemap plugin <= 3.4 - Broken Access Control vulnerability 0.6%
  • CVE-2025-31583 High 7.1 WordPress WP Copy Media URL plugin <= 2.1 - CSRF to Stored XSS vulnerability 0.1%
  • CVE-2025-31410 Medium 4.3 WordPress WP Church Donation plugin <= 1.7 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2023-49850 Medium 5.3 WordPress WP Simple HTML Sitemap plugin <= 2.7 - Broken Access Control vulnerability 0.4%
  • CVE-2024-32574 High 7.1 WordPress WP Simple HTML Sitemap plugin <= 2.8 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-46627 High 7.1 WordPress WP Simple HTML Sitemap Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS) 0.5%
  • CVE-2023-45067 Medium 6.5 WordPress WP Simple HTML Sitemap Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS) 0.4%