Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
DelowerWp To Do

7 matches found

CVE
CVE•added 2024/01/31 6:15 p.m.•47 views

CVE-2024-22292

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Delower WP To Do allows Stored XSS.This issue affects WP To Do: from n/a through 1.2.8.

6.5CVSS5.8AI score0.00065EPSS
CVE
CVE•added 2024/05/30 5:15 a.m.•46 views

CVE-2024-3946

The WP To Do plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and abov...

4.8CVSS4.6AI score0.00207EPSS
CVE
CVE•added 2024/05/30 5:15 a.m.•42 views

CVE-2024-3947

The WP To Do plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.0. This is due to missing or incorrect nonce validation on the wptodo_settings() function. This makes it possible for unauthenticated attackers to modify the plugin's settings via...

4.3CVSS4.6AI score0.00183EPSS
CVE
CVE•added 2024/07/06 1:15 p.m.•41 views

CVE-2024-37539

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Delower WP To Do allows Stored XSS.This issue affects WP To Do: from n/a through 1.3.0.

6.5CVSS6.2AI score0.00064EPSS
CVE
CVE•added 2024/05/30 5:15 a.m.•39 views

CVE-2024-3943

The WP To Do plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.0. This is due to missing or incorrect nonce validation on the wptodo_addcomment function. This makes it possible for unauthenticated attackers to add comments to to do items via ...

4.3CVSS4.6AI score0.00183EPSS
CVE
CVE•added 2024/08/29 11:15 a.m.•36 views

CVE-2024-3944

The WP To Do plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to i...

4.8CVSS4.7AI score0.00094EPSS
CVE
CVE•added 2024/05/30 5:15 a.m.•36 views

CVE-2024-3945

The WP To Do plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.0. This is due to missing or incorrect nonce validation on the wptodo_manage() function. This makes it possible for unauthenticated attackers to add new todo items via a forged re...

4.3CVSS4.6AI score0.00183EPSS