wp-todo
WordPress · Plugin
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Settings | wp-todo | WordPress | Medium | Fix reported | |
| WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_settings | wp-todo | WordPress | Medium | Fix reported | |
| WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Task Comments | wp-todo | WordPress | Medium | Fix reported | |
| WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_manage() | wp-todo | WordPress | Medium | Fix reported | |
| WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_addcomment | wp-todo | WordPress | Medium | Fix reported | |
| WP To Do <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting | wp-todo | WordPress | Medium | Fix reported | |
| WP To Do <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting | wp-todo | WordPress | Medium | Fix reported |

