CVE-2025-39413

ALTO 8.8CVE-2025-39413 · Published 30/04/2025 · updated 17/06/2026

In breve

CVE-2025-39413 è una vulnerabilità ALTO (CVSS 8.8) che riguarda simple sitemap (wpgoplugins).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.40%, superiore al 34.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
simple sitemap wpgoplugins	`≤ 3.6.0`	No fix yet

Description

Missing Authorization vulnerability in David Gwyer Simple Sitemap – Create a Responsive HTML Sitemap simple-sitemap.This issue affects Simple Sitemap – Create a Responsive HTML Sitemap: from n/a through <= 3.6.0.

References

patchstack.com/database/Wordpress/Plugin/simple-sitemap/vulnerability/wordpress-simple-sitemap-create-a-responsive-html-sitemap-plugin-3-5-14-broken-access-control-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free