CVE-2025-22342
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Jan 7, 2025
CWE ID 352
Summary
CVE-2025-22342 is a Cross-Site Request Forgery (CSRF) vulnerability identified in WP Simple Sitemap, a WordPress plugin used to generate XML sitemaps. The issue permits attackers to execute Stored XSS (Cross-Site Scripting) attacks on unsuspecting users, potentially leading to the theft of sensitive information or unauthorized actions within their WordPress sites. This vulnerability affects WP Simple Sitemap versions from n/a through 0.2, making it crucial for users to update to the latest, secure version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.