Sitemap Project vulnerabilities
We track 1 vulnerability in Sitemap Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 2, 2022.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Sitemap Project vulnerabilities
- 8.8 High severity
Sitemap by click5: Cross-Site Request Forgery
The Sitemap by click5 WordPress plugin before 1.0.36 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the plugin. As a result, unauthenticated attackers could ch