Skip to content
OpenAdvisories

Vendor

Ashish Ajani

14 known vulnerabilities.

Products

WP Simple HTML Sitemap 5 Contact Form vCard Generator 3 WordPress Simple HTML Sitemap 2 WP Church Donation 2 WP Copy Media URL 1 WP Show Stats 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-39654

    WordPress WP Simple HTML Sitemap plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashish Ajani WP Simple HTML Sitemap wp-simple-html-sitemap allows DOM-Based XSS.This issue affects WP Simple HTML Sitemap: from n/a through <= 3.8.

    Ashish Ajani WP Simple HTML Sitemap
  • Medium 5.3
    CVE-2025-13717

    Contact Form vCard Generator <= 2.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'wp-gvc-cf-download-id' Parameter

    The Contact Form vCard Generator plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wp_gvccf_check_download_request' function in all versions up to, and including, 2.4. This makes it possible for unauth…

    Ashish Ajani Contact Form vCard Generator Web / CMS
  • Medium 4.3
    CVE-2025-32678

    WordPress WP Show Stats plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Ashish Ajani WP Show Stats wp-show-stats allows Cross Site Request Forgery.This issue affects WP Show Stats: from n/a through <= 1.5.

    Ashish Ajani WP Show Stats
  • Medium 5.3
    CVE-2025-31822

    WordPress WordPress Simple HTML Sitemap plugin <= 3.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Ashish Ajani WP Simple HTML Sitemap wp-simple-html-sitemap allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Simple HTML Sitemap: from n/a through <= 3.5.

    Ashish Ajani WP Simple HTML Sitemap
  • Medium 4.3
    CVE-2025-31410

    WordPress WP Church Donation plugin <= 1.7 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Ashish Ajani WP Church Donation wp-church-donation allows Cross Site Request Forgery.This issue affects WP Church Donation: from n/a through <= 1.7.

    Ashish Ajani WP Church Donation
  • Medium 5.3
    CVE-2023-49850

    WordPress WP Simple HTML Sitemap plugin <= 2.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Ashish Ajani WP Simple HTML Sitemap allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Simple HTML Sitemap: from n/a through 2.7.

    Ashish Ajani WP Simple HTML Sitemap
  • Medium 6.5
    CVE-2023-45067

    WordPress WP Simple HTML Sitemap Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Ashish Ajani WordPress Simple HTML Sitemap plugin <= 2.1 versions.

    Ashish Ajani WordPress Simple HTML Sitemap Web / CMS