Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: toocheke Clear all filters
TI-2026-24931 CVE-2026-32403 · GHSA-qqmm-f2gc-79g5

WordPress Toocheke Companion plugin <= 1.194 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in toocheke Toocheke Companion toocheke-companion allows DOM-Based XSS.This issue affects Toocheke Companion: from n/a th…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00191 Published 2026-03-13 No fix listed CWE-79
TI-2025-17759 CVE-2025-23992 · GHSA-xrv6-3vg3-5pm7

WordPress Toocheke Companion plugin <= 1.166 - Stored Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in toocheke Toocheke Companion toocheke-companion allows Stored XSS.This issue affects Toocheke Companion: from n/a throu…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00242 Published 2025-01-22 No fix listed CWE-79