Theluckywp Luckywp Table Of Contents — known CVE vulnerabilities

Every CVE whose affected-product data names Theluckywp Luckywp Table Of Contents, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2024-2119 — CVSS 6.1 (medium): The LuckyWP Table of Contents plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the attrs parameter in all versions…
• CVE-2025-2299 — CVSS 6.1 (medium): The LuckyWP Table of Contents plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including…
• CVE-2024-2953 — CVSS 5.5 (medium): The LuckyWP Table of Contents plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to…
• CVE-2024-9641 — CVSS 4.8 (medium): The LuckyWP Table of Contents WordPress plugin before 2.1.7 does not sanitise and escape some of its settings, which could allow high…
• CVE-2024-2218 — CVSS 4.6 (medium): The LuckyWP Table of Contents WordPress plugin through 2.1.4 does not sanitise and escape some of its settings, which could allow high…
• CVE-2023-6487 — CVSS 4.4 (medium): The LuckyWP Table of Contents plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Header Title' field in all…