Medium · 4.3 CVE-2024-49250 EUVD-2024-43318GHSA-qvh6-69xv-v77r

WordPress Table of Contents Plus plugin <= 2408 - Cross Site Request Forgery (CSRF) vulnerability

Published Oct 20, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Syed Balkhi Product: Table of Contents Plus

Description

Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Table of Contents Plus table-of-contents-plus allows Cross Site Request Forgery.This issue affects Table of Contents Plus: from n/a through <= 2408.

Affected products

Vendor	Product	Affected	Fixed
Syed Balkhi	Table of Contents Plus	≤ 2408	—

References

https://patchstack.com/database/Wordpress/Plugin/table-of-contents-plus/vulnerability/wordpress-table-of-contents-plus-plugin-2408-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry