Approved changes feed: RSS · Atom

cpe:2.3:a:codeermeneer:companion_sitemap_generator:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorCodeermeneer (45bce2fd-6cea-54b1-a426-01f9e1fa3324)
ProductCompanion Sitemap Generator (70a69035-68c0-54c7-be0b-a6dc02d4f34a)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-1780 vulnerable 2026-06-08 05:52:37.028299 Companion Sitemap Generator < 4.5.3 - Reflected XSS
The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Published: 2023-07-10T12:40:32.893Z
Updated: 2024-11-08T18:23:54.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0066 vulnerable 2026-06-08 05:52:04.212579 Companion Sitemap Generator <= 4.5.1.1 - Contributor+ Stored XSS
The Companion Sitemap Generator WordPress plugin through 4.5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Published: 2023-03-13T16:03:28.952Z
Updated: 2025-02-27T20:26:54.146Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15113 vulnerable 2026-06-08 05:12:56.679031 Details available
The companion-sitemap-generator plugin before 3.7.0 for WordPress has CSRF.
Published: 2019-08-16T20:20:26.000Z
Updated: 2024-08-05T00:34:53.219Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.