Dublue Table Of Contents Plus — known CVE vulnerabilities

Every CVE whose affected-product data names Dublue Table Of Contents Plus, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-4479 — CVSS 5.4 (medium): The Table of Contents Plus WordPress plugin before 2212 does not validate and escape some of its shortcode attributes before outputting…
• CVE-2023-44473 — CVSS 5.4 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Michael Tran Table of Contents Plus plugin <= 2302 versions.
• CVE-2024-5578 — CVSS 4.8 (medium): The Table of Contents Plus WordPress plugin through 2408 does not sanitise and escape some of its settings, which could allow high…
• CVE-2024-49250 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Table of Contents Plus table-of-contents-plus allows Cross Site Request…