What’s Vulnerable › Products

delower186 WP To Do vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your delower186 WP To Do version is affected

Latest delower186 WP To Do vulnerabilities

• CVE-2024-3944 — WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Task Comments (CVSS 4.8)
• CVE-2024-37539 — WordPress WP To Do plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-3947 — WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_settings (CVSS 4.3)
• CVE-2024-3946 — WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Settings (CVSS 4.8)
• CVE-2024-3945 — WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_manage() (CVSS 4.3)
• CVE-2024-3943 — WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_addcomment (CVSS 4.3)
• CVE-2024-22292 — WordPress WP To Do Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)