Description
Unauthenticated Cross Site Request Forgery (CSRF) in Kwayy HTML Sitemap <= 4.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Bimal Rekhadiya | Kwayy HTML Sitemap | ≤ 4.0 | — |
High · 7.1
CVE-2026-65539
EUVD-2026-48140GHSA-wc7j-93c4-x4rh
WordPress Kwayy HTML Sitemap plugin <= 4.0 - CSRF to Stored XSS vulnerability
Published Jul 23, 2026 · Updated Jul 23, 2026 · Assigned by Patchstack