Medium · 6.5 CVE-2026-66645 EUVD-2026-60929GHSA-h2p9-653p-8w8v

WordPress Table Of Contents Block plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack

Vendor: WPDeveloper Product: Table Of Contents Block

Description

Contributor Cross Site Scripting (XSS) in Table Of Contents Block <= 1.5.0 versions.

Affected products

Vendor	Product	Affected	Fixed
WPDeveloper	Table Of Contents Block	≤ 1.5.0	—

References

https://patchstack.com/database/wordpress/plugin/table-of-contents-block/vulnerability/wordpress-table-of-contents-block-plugin-1-5-0-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry