Skip to content
OpenAdvisories

Vendor

dgwyer

2 known vulnerabilities.

Products

Simple Sitemap – Create a Responsive HTML Sitemap 1 Power Charts – Responsive Beautiful Charts & Graphs 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-4011

    Power Charts <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute

    The Power Charts Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the [pc] shortcode in all versions up to, and including, 0.1.0. This is due to insufficient input sanitization and output escaping on the 'id' sh…

    dgwyer Power Charts – Responsive Beautiful Charts & Graphs Web / CMS
  • Medium 4.3
    CVE-2023-6492

    Simple Sitemap <= 3.5.13 - Cross-Site Request Forgery via admin_notices

    The Simple Sitemap – Create a Responsive HTML Sitemap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.5.13. This is due to missing or incorrect nonce validation in the 'admin_notices' hook found in clas…

    dgwyer Simple Sitemap – Create a Responsive HTML Sitemap Web / CMS