Companion Sitemap Generator – Simple, Smart, and SEO-Ready

Companion Sitemap Generator – Simple, Smart, and SEO-Ready has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2023; all 3 are fixed as of September 2026. Their average CVSS score is 7.1, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF).

Every one of the 3 issues recorded for Companion Sitemap Generator – Simple, Smart, and SEO-Ready has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Companion Sitemap Generator – Simple, Smart, and SEO-Ready is installed on roughly 7,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSHigh

7.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Companion Sitemap Generator – Simple, Smart, and SEO-Ready vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2019-15113

Companion Sitemap Generator – HTML & XML <= 3.6.6 - Cross-Site Request Forgery and Local File Inclusion

Read the full analysis

Vulnerability Records

3 records


2023-06-19 00:00	Companion Sitemap Generator <= 4.5.1.1 - Reflected Cross-Site Scripting Companion Sitemap Generator <= 4.5.1.1	`CVE-2023-1780`	6.1 Medium	Erwan LR	Yes
2023-02-20 00:00	Companion Sitemap Generator <= 4.5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Companion Sitemap Generator <= 4.5.1.1	`CVE-2023-0066`	6.4 Medium	István Márton	Yes
2019-01-10 00:00	Companion Sitemap Generator – HTML & XML <= 3.6.6 - Cross-Site Request Forgery and Local File Inclusion Companion Sitemap Generator <= 3.6.6	`CVE-2019-15113`	8.8 High	Anonymous	Yes

Showing 1–3 of 3 reports

Latestv4.6.2

Companion Sitemap Generator – Simple, Smart, and SEO-Ready

Author

Papin Schipper

4.7(55)

94/100

Last Updated

2026-04-23 (5mo ago)

Active Installs

7,000+

Downloads

199,793

Requires WP

6.0+

Requires PHP

7.0+

Tested up to

WP 6.9.7

Created

2016-03-08 (11y ago)

Create clean, complete, and up-to-date sitemaps for your WordPress website — automatically. Companion Sitemap Generator helps search engines and visitors explore your site with ease by generating both XML and HTML sitemaps, no coding required. Whether you run a blog, portfolio, or e-commerce store, this plugin ensures that every important page stays visible and discoverable. Features Automatic XML Sitemap: Always up-to-date and optimized for search engines including Google & Bing. User-Friendly HTML Sitemap: Create a public sitemap page to help visitors explore your site. Content Control: Include or exclude specific posts, pages, categories, taxonomies, or custom post types. Multilingual Support: Full compatibility with Polylang and other translation plugins. Built-in Robots.txt Manager: Edit crawling rules right inside WordPress — no FTP required. Lightweight & Fast: Minimal performance impact and no unnecessary scripts or bloat. Why Use Companion Sitemap Generator? Works immediately, zero configuration needed. No tracking or external services. Perfect for site owners, agencies, and developers. Active maintenance and full compatibility with the latest WordPress releases.

View on WordPress.org