CVE-2023-49850: WordPress WP Simple HTML Sitemap plugin <= 2.7 - Broken Access Control vuln

WordPress WP Simple HTML Sitemap plugin <= 2.7 - Broken Access Control vulnerability

Status

Published

2024-12-09

Updated

2026-04-28

Assigning organization

Patchstack

Description

Missing Authorization vulnerability in Ashish Ajani WP Simple HTML Sitemap allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Simple HTML Sitemap: from n/a through 2.7.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ashish Ajani WP Simple HTML Sitemap

Default version status: unaffected

n/a to ≤ 2.7affected

References

https://patchstack.com/database/wordpress/plugin/wp-simple-html-sitemap/vulnerability/wordpress-wp-simple-html-sitemap-plugin-2-4-broken-access-control-vulnerability?_s_id=cve ↗