EIP-2026-114232

PRE-CVE

WordPress Plugin WP Sitemap Page 1.6.2 - Persistent Cross-Site Scripting

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-114232. PoCs published by Ultra Security Team.

AI-analyzed exploit summary This exploit demonstrates a persistent XSS vulnerability in the WordPress Plugin WP Sitemap Page 1.6.2. The PoC shows how an attacker can inject malicious JavaScript into the 'Exclude pages' field, which is then stored and executed when the page is accessed.

Description

WordPress Plugin WP Sitemap Page 1.6.2 - Persistent Cross-Site Scripting

Exploits (1)

exploitdb WORKING POC
by Ultra Security Team · textwebappsphp
https://www.exploit-db.com/exploits/48093

This exploit demonstrates a persistent XSS vulnerability in the WordPress Plugin WP Sitemap Page 1.6.2. The PoC shows how an attacker can inject malicious JavaScript into the 'Exclude pages' field, which is then stored and executed when the page is accessed.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: WordPress Plugin WP Sitemap Page 1.6.2
Auth required
Prerequisites: Access to WordPress admin panel · WP Sitemap Page plugin installed and activated
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026