Advisories · Technology

gregmolnar Simple XML Sitemap.

Every CVE that names gregmolnar Simple XML Sitemap among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-22355 CVE record

CVSS 7.1 High

WordPress Simple XML Sitemap plugin <= 1.3 - CSRF to Stored XSS vulnerability
- gregmolnar Simple XML Sitemap
- Cross-site request forgery (CSRF)
Not analysed yet 22 Jan 2026