CVE-2024-49250

Description

References

• patchstack.com/database/Wordpress/Plugin/table-of-contents-plus/vulnerability/wordpress-table-of-contents-plus-plugin-2408-cross-site-request-forgery-csrf-vulnerability

More vulnerabilities in table of contents plus

• CVE-2024-5578MEDIUM 4.8The Table of Contents Plus WordPress plugin through 2408 does not sanitise and escape some of its settings, which could allow high privilege…
• CVE-2023-44473HIGH 8.8Cross-Site Request Forgery (CSRF) vulnerability in Michael Tran Table of Contents Plus plugin <= 2302 versions.
• CVE-2022-4479MEDIUM 5.4The Table of Contents Plus WordPress plugin before 2212 does not validate and escape some of its shortcode attributes before outputting them…