Vulnerability Details CVE-2014-2675
Cross-site request forgery (CSRF) vulnerability in inc/AdminPage.php in the WP HTML Sitemap plugin 1.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete the sitemap via a request to the wp-html-sitemap page in wp-admin/options-general.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 24.5%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 5.8
References
Products affected by CVE-2014-2675
-
cpe:2.3:a:wp-html-sitemap_project:wp-html-sitemap:1.2