Advisories · Technology

Gary Illyes Google XML News Sitemap plugin.

Every CVE that names Gary Illyes Google XML News Sitemap plugin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-48304 CVE record

CVSS 7.1 High

WordPress Google XML News Sitemap plugin plugin <= 0.02 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
- Gary Illyes Google XML News Sitemap plugin
- Cross-site request forgery (CSRF)
Not analysed yet 28 Aug 2025