Skip to content
OpenAdvisories

Vendor

Ashish Ajani

14 known vulnerabilities.

Products

WP Simple HTML Sitemap 5 Contact Form vCard Generator 3 WordPress Simple HTML Sitemap 2 WP Church Donation 2 WP Copy Media URL 1 WP Show Stats 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.1
    CVE-2025-39521

    WordPress Contact Form vCard Generator plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashish Ajani Contact Form vCard Generator contact-form-vcard-generator allows Reflected XSS.This issue affects Contact Form vCard Generator: from n/a through…

    Ashish Ajani Contact Form vCard Generator
  • High 7.1
    CVE-2025-31582

    WordPress Contact Form vCard Generator plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashish Ajani Contact Form vCard Generator contact-form-vcard-generator allows Stored XSS.This issue affects Contact Form vCard Generator: from n/a through <=…

    Ashish Ajani Contact Form vCard Generator
  • High 7.1
    CVE-2025-31583

    WordPress WP Copy Media URL plugin <= 2.1 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Ashish Ajani WP Copy Media URL wp-copy-media-url allows Stored XSS.This issue affects WP Copy Media URL: from n/a through <= 2.1.

    Ashish Ajani WP Copy Media URL
  • High 7.2
    CVE-2024-13690

    WP Church Donation <= 1.7 - Unauthenticated Stored Cross-Site Scripting

    The WP Church Donation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several donation form submission parameters in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possib…

    Ashish Ajani WP Church Donation Web / CMS
  • High 7.1
    CVE-2024-32574

    WordPress WP Simple HTML Sitemap plugin <= 2.8 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashish Ajani WP Simple HTML Sitemap allows Reflected XSS.This issue affects WP Simple HTML Sitemap: from n/a through 2.8.

    Ashish Ajani WP Simple HTML Sitemap
  • High 7.1
    CVE-2023-46627

    WordPress WP Simple HTML Sitemap Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ashish Ajani WordPress Simple HTML Sitemap plugin <= 2.1 versions.

    Ashish Ajani WordPress Simple HTML Sitemap Web / CMS