Codeermeneer

codeermeneer

5 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Companion Sitemap Generator

companion_sitemap_generator

Companion Auto Update

companion_auto_update

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-1780 1Codeermeneer 1Companion Sitemap Generator Jun 17, 2026 Jul 10, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high...Show more The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.Show less
CVE-2023-0066 1Codeermeneer 1Companion Sitemap Generator Jun 17, 2026 Mar 13, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 The Companion Sitemap Generator WordPress plugin through 4.5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow us...Show more The Companion Sitemap Generator WordPress plugin through 4.5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.Show less
CVE-2019-15113 1Codeermeneer 1Companion Sitemap Generator Jun 17, 2026 Aug 16, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The companion-sitemap-generator plugin before 3.7.0 for WordPress has CSRF.
CVE-2018-20973 1Codeermeneer 1Companion Auto Update Nov 21, 2024 Aug 16, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The companion-auto-update plugin before 3.2.1 for WordPress has local file inclusion.
CVE-2018-20972 1Codeermeneer 1Companion Auto Update Nov 21, 2024 Aug 16, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The companion-auto-update plugin before 3.2.1 for WordPress has CSRF.