CVE

CVE-2022-0346

6.1

CVSS

Description

The XML Sitemap Generator for Google WordPress plugin before 2.0.4 does not validate a parameter which can be set to an arbitrary value, thus causing XSS via error message or RCE if allow_url_include is turned on.

Attack Vector

Privileges Req.

User Interaction

xml sitemap generator for google

Updated Sep 26, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2022-0346 Scanner

CVE-2022-0346 scanner - Cross-Site Scripting (XSS) vulnerability in XML Sitemap Generator for Google plugin for WordPress

Used 3.3k times · 5.9k assets checked · url

Scanner page →Run scanner

CVE history: xml sitemap generator for google

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →