WordPress plugin
Table of Contents Plus – Automatic Table of Contents for Posts & Pages security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 5 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium5
- Low0
All Table of Contents Plus – Automatic Table of Contents for Posts & Pages vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.5 | Authenticated (Editor+) Stored Cross-Site Scripting ≤2411Update to 2411.1 | CVE-2024-5578 | |
| Medium4.3 | Cross-Site Request Forgery ≤2408Update to 2411 | CVE-2024-49250 | |
| Medium4.3 | Cross-Site Request Forgery ≤2302Update to 2309 | CVE-2023-44473 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting <2309Update to 2309 | — | |
| Medium5.5 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤2106Update to 2212 | CVE-2022-4479 |
- Medium5.5Authenticated (Editor+) Stored Cross-Site Scripting
≤2411Update to 2411.1
- Medium4.3Cross-Site Request Forgery
≤2408Update to 2411
- Medium4.3Cross-Site Request Forgery
≤2302Update to 2309
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
<2309Update to 2309
- Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
≤2106Update to 2212
Table of Contents Plus – Automatic Table of Contents for Posts & Pages: common questions
Does Table of Contents Plus – Automatic Table of Contents for Posts & Pages have known vulnerabilities?
Yes. VulnCrest Radar lists 5 known vulnerabilities in Table of Contents Plus – Automatic Table of Contents for Posts & Pages: 5 medium. None are known to affect version null.
How do I check which version of Table of Contents Plus – Automatic Table of Contents for Posts & Pages I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Table of Contents Plus – Automatic Table of Contents for Posts & Pages vulnerability?
CVE-2024-5578, published Oct 15, 2024: Table of Contents Plus <= 2411 - Authenticated (Editor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 5.5).
Is any Table of Contents Plus – Automatic Table of Contents for Posts & Pages vulnerability listed in CISA KEV?
No. None of the known Table of Contents Plus – Automatic Table of Contents for Posts & Pages vulnerabilities is currently listed in the CISA KEV catalog.