All products

wp-todo

WordPress · Plugin
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via SettingsCVE-2024-3946 wp-todo WordPress Medium Fix reported
WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_settingsCVE-2024-3947 wp-todo WordPress Medium Fix reported
WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Task CommentsCVE-2024-3944 wp-todo WordPress Medium Fix reported
WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_manage()CVE-2024-3945 wp-todo WordPress Medium Fix reported
WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_addcommentCVE-2024-3943 wp-todo WordPress Medium Fix reported
WP To Do <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-37539 wp-todo WordPress Medium Fix reported
WP To Do <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-22292 wp-todo WordPress Medium Fix reported