Vulnerabilities

TI-2026-47218 CVE-2026-66464 · GHSA-7v4h-xrw2-xw45

WordPress Internal Link Optimiser plugin <= 5.2.7 - Broken Access Control vulnerability

LOW 34

Unauthenticated Broken Access Control in Internal Link Optimiser <= 5.2.7 versions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00266 Published 2026-08-13 No fix listed CWE-862

TI-2025-33205 CVE-2025-53238 · GHSA-39cw-g9qr-3jph

WordPress Toast Mobile Menu plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Toast Plugins Toast Mobile Menu toast-responsive-menu allows Stored XSS.This issue affects Toast Mobile Menu: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0025 Published 2025-10-22 No fix listed CWE-79

TI-2025-33884 CVE-2025-54039 · GHSA-w554-pp43-j27h

WordPress Animator plugin <= 3.0.16 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Toast Plugins Animator scroll-triggered-animations allows Cross Site Request Forgery.This issue affects Animator: from n/a through <= 3.0.16.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00145 Published 2025-07-16 No fix listed CWE-352

TI-2025-26289 CVE-2025-39547 · GHSA-fcc8-29wg-87m4

WordPress Internal Link Optimiser plugin <= 5.1.3 - CSRF to XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Toast Plugins Internal Link Optimiser internal-link-finder allows Stored XSS.This issue affects Internal Link Optimiser: from n/a through <= 5.1.3.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00189 Published 2025-04-16 No fix listed CWE-352

TI-2025-23340 CVE-2025-32243 · GHSA-j3q6-2vww-g93w

WordPress Internal Link Optimiser plugin <= 5.1.2 - Settings Change vulnerability

LOW 35

Missing Authorization vulnerability in Toast Plugins Internal Link Optimiser internal-link-finder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Internal Link Optimiser: from n…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00318 Published 2025-04-10 No fix listed CWE-862

TI-2023-25827 CVE-2023-47689 · GHSA-2p7v-6q2g-9wg5

WordPress Animator plugin <= 3.0.10 - Unauthenticated Plugin Settings Change Vulnerability

LOW 35

Missing Authorization vulnerability in Toast Plugins Animator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animator: from n/a through 3.0.10.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00412 Published 2025-01-02 No fix listed CWE-862

TI-2024-32901 CVE-2024-49308 · GHSA-f9v3-f62g-7r58

WordPress Animator – Scroll Triggered Animations plugin <= 3.0.15 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Toast Plugins Animator scroll-triggered-animations allows Reflected XSS.This issue affects Animator: from n/a through…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00287 Published 2024-10-17 No fix listed CWE-79

TI-2024-22230 CVE-2024-33646 · GHSA-8g9x-vm55-m3mq

WordPress Sticky Anything plugin <= 2.1.5 - Broken Access Control to XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Toast Plugins Sticky Anything allows Cross-Site Scripting (XSS).This issue affects Sticky Anything: from n/a through 2.1.5.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00184 Published 2024-04-29 No fix listed CWE-352

TI-2024-20275 CVE-2024-30551 · GHSA-6p9p-58j4-q9jf

WordPress Sticky Anything plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Toast Plugins Sticky Anything.This issue affects Sticky Anything: from n/a through 2.1.5.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00334 Published 2024-03-31 No fix listed CWE-79

Vulnerabilities

Filters