WordPress Plugin Vulnerabilities

XML Sitemap Generator 3.2.8 - XML File Overwrite Arbitrary Code Execution

Description

The google-xml-sitemaps-generator WordPress plugin was affected by a XML File Overwrite Arbitrary Code Execution security vulnerability.

Affects Plugins

Plugin icon
google-xml-sitemaps-generator
No known fix

References

URL
https://packetstormsecurity.com/files/#119357/

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
903fbe78-b7d5-49fb-9562-bf49d73adbd3

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-09-16
Title
WP Import – Ultimate CSV XML Importer for WordPress 7.20 - 7.28 - Authenticated (Subscriber+) Remote Code Execution via Code Injection
Published
2024-09-04
Title
Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition
Published
2024-11-11
Title
Podlove Podcast Publisher < 4.1.17 - Authenticated (Admin+) Remote Code Execution
Published
2024-05-23
Title
WP Photo Album Plus < 8.7.00.004 - Unauthenticated Arbitrary Shortcode Execution
Published
2024-10-18
Title
Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution