CVE-2026-65539

The vulnerability allows unauthenticated attackers to exploit Cross Site Request Forgery (CSRF) in Kwayy HTML Sitemap versions up to 4.0, potentially leading to unauthorized actions being performed on behalf of users without their consent. This poses a significant risk to web applications utilizing this plugin, as it can compromise user data and site integrity. Organizations using affected versions should prioritize patching this vulnerability to mitigate potential exploitation.