Delower WP To Do

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs

WordPress WP To Do Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)

Published 2024-01-31 · Modified

6.5EPSS 0.003

WordPress WP To Do plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Published 2024-07-06 · Modified

6.5EPSS 0.003

WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Task Comments

Published 2024-08-29 · Modified

4.8EPSS 0.003

WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Settings

Published 2024-05-30 · Modified

4.8EPSS 0.003

WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_addcomment

Published 2024-05-30 · Modified

4.3EPSS 0.002

WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_manage()

Published 2024-05-30 · Modified

4.3EPSS 0.002

WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_settings

Published 2024-05-30 · Modified

4.3EPSS 0.002