Dot html,php,xml etc pages

Dot html,php,xml etc pages has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; none of them are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

None of the 2 issues recorded for Dot html,php,xml etc pages have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, one record each. Dot html,php,xml etc pages is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.4.2.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Dot html,php,xml etc pages vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-52779

Dot html,php,xml etc pages <= 1.0 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-07-07 00:00	Dot html,php,xml etc pages <= 1.0 - Reflected Cross-Site Scripting Dot html,php,xml etc pages <= 1.0	`CVE-2025-52779`	6.1 Medium	Nguyen Xuan Chien	No
2025-05-16 00:00	Dot html,php,xml etc pages <= 1.0 - Reflected Cross-Site Scripting Dot html,php,xml etc pages <= 1.0	`CVE-2025-48112`	6.1 Medium	0xd4rk5id3	No

Showing 1–2 of 2 reports

Plugin Profile

Latestv1.0

Dot html,php,xml etc pages

Author

karimmughal

0.0(0)

0/100

Last Updated

2012-08-19 (14y ago)

Active Installs

100+

Downloads

9,175

Requires WP

2.3+

Requires PHP

Tested up to

WP 3.4.2

Created

2010-09-25 (16y ago)

This plugin allows you to create custom URLs for ur pages, for your WordPress blog. This Plugin Adds .php, html, .xml etc SIGNATURE Extension to Your Pages Like http://www.yoursitename.com/yourpage.php,.html,xml any signature. WARNING: FIRST DEACTIVATE THE OTHER EXTENSION PAGES PLUGIN. Just Activate The Plugin And Setting The Pages Through Setting->Dot html,php,xml etc pages. Powered By KSM (http://ksmughal.com)

View on WordPress.org