Theluckywp

Luckywp Table Of Contents

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2025-2299

  • EPSS 0.14%
  • Veröffentlicht 03.04.2025 12:15:14
  • Zuletzt bearbeitet 15.05.2025 19:54:41

The LuckyWP Table of Contents plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.10. This is due to missing or incorrect nonce validation on the 'ajaxEdit' function. This makes it possible for u...

4.8

CVE-2024-9641

Exploit
  • EPSS 0.07%
  • Veröffentlicht 12.12.2024 06:15:24
  • Zuletzt bearbeitet 07.05.2025 13:04:41

The LuckyWP Table of Contents WordPress plugin before 2.1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capabilit...

4.6

CVE-2024-2218

Exploit
  • EPSS 0.14%
  • Veröffentlicht 14.06.2024 06:15:11
  • Zuletzt bearbeitet 13.05.2025 02:00:50

The LuckyWP Table of Contents WordPress plugin through 2.1.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capabili...

6.1

CVE-2024-2119

  • EPSS 2%
  • Veröffentlicht 22.05.2024 08:15:09
  • Zuletzt bearbeitet 28.05.2025 19:59:45

The LuckyWP Table of Contents plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the attrs parameter in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping. This makes it possible ...

4.8

CVE-2024-2953

  • EPSS 0.33%
  • Veröffentlicht 22.05.2024 08:15:09
  • Zuletzt bearbeitet 28.05.2025 19:59:31

The LuckyWP Table of Contents plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping. This makes it possible for aut...

5.4

CVE-2023-6487

  • EPSS 0.21%
  • Veröffentlicht 22.05.2024 08:15:08
  • Zuletzt bearbeitet 28.05.2025 20:00:01

The LuckyWP Table of Contents plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Header Title' field in all versions up to and including 2.1.4 due to insufficient input sanitization and output escaping. This makes it possible ...