Magazine3 Easy Table Of Contents vulnerabilities
6 known vulnerabilities affecting magazine3/easy_table_of_contents.
Total CVEs
6
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM6
Vulnerabilities
Page 1 of 1
CVE-2026-32343MEDIUMCVSS 4.3≤ 2.0.802026-03-13
CVE-2026-32343 [MEDIUM] CWE-352 CVE-2026-32343: Cross-Site Request Forgery (CSRF) vulnerability in Magazine3 Easy Table of Contents easy-table-of-co
Cross-Site Request Forgery (CSRF) vulnerability in Magazine3 Easy Table of Contents easy-table-of-contents allows Cross Site Request Forgery.This issue affects Easy Table of Contents: from n/a through <= 2.0.80.
cvelistv5nvd
CVE-2025-13738MEDIUMCVSS 6.4≤ 2.0.782026-02-19
CVE-2025-13738 [MEDIUM] CWE-79 CVE-2025-13738: The Easy Table of Contents plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the
The Easy Table of Contents plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `ez-toc` shortcode in all versions up to, and including, 2.0.78 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and abov
cvelistv5nvd
CVE-2023-25469MEDIUMCVSS 5.4≥ n/a, ≤ 2.0.45.22024-12-09
CVE-2023-25469 [MEDIUM] CWE-862 CVE-2023-25469: Missing Authorization vulnerability in Magazine3 Easy Table of Contents allows Exploiting Incorrectl
Missing Authorization vulnerability in Magazine3 Easy Table of Contents allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Table of Contents: from n/a through 2.0.45.2.
cvelistv5nvd
CVE-2024-7082MEDIUMCVSS 6.1fixed in 2.0.682024-08-06
CVE-2024-7082 [MEDIUM] CWE-79 CVE-2024-7082: The Easy Table of Contents WordPress plugin before 2.0.68 does not sanitise and escape some paramete
The Easy Table of Contents WordPress plugin before 2.0.68 does not sanitise and escape some parameters, which could allow users with a role as low as Editor to perform Cross-Site Scripting attacks.
nvd
CVE-2024-6334MEDIUMCVSS 6.1fixed in 2.0.67.12024-07-09
CVE-2024-6334 [MEDIUM] CWE-79 CVE-2024-6334: The Easy Table of Contents WordPress plugin before 2.0.67.1 does not sanitise and escape some of its
The Easy Table of Contents WordPress plugin before 2.0.67.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
nvd
CVE-2024-5573MEDIUMCVSS 5.9fixed in 2.0.662024-06-26
CVE-2024-5573 [MEDIUM] CWE-79 CVE-2024-5573: The Easy Table of Contents WordPress plugin before 2.0.66 does not sanitise and escape some of its s
The Easy Table of Contents WordPress plugin before 2.0.66 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
nvd