What’s Vulnerable › Products

To Do List Member vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your To Do List Member version is affected

Latest To Do List Member vulnerabilities

• CVE-2026-86802 — To Do List Member 1.4 - 1.6 - Unauthenticated Content Injection via Import (CVSS 3.7)
• CVE-2026-86801 — To Do List Member 1.4 - 1.6 - Unauthenticated Stored XSS, File Listing and Deletion via Unprotected Upload Handler (CVSS 8.8)