Easy Table Of Contents
Approved changes feed: RSS · Atom
cpe:2.3:a:magazine3:easy_table_of_contents:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Magazine3 (7e4cb157-d360-562d-a694-e813be0c8ddb) |
|---|---|
| Product | Easy Table Of Contents (1a15c713-32f9-5a20-8dcb-1c636490688d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-32343 |
vulnerable | 2026-06-08 07:57:17.456199 | db.gcve.eu details are currently unavailable. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13738 |
vulnerable | 2026-06-08 07:06:32.596282 |
Easy Table of Contents <= 2.0.78 - Authenticated (Contributor+) Stored Cross-Site Scripting
MEDIUM (6.4)
The Easy Table of Contents plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `ez-toc` shortcode in all versions up to, and including, 2.0.78 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2026-02-19T04:36:15.436Z
Updated: 2026-04-08T17:00:40.032Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5573 |
vulnerable | 2026-06-08 06:56:16.586368 |
Easy Table of Contents < 2.0.66 - Admin+ Stored XSS
The Easy Table of Contents WordPress plugin before 2.0.66 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
Published: 2024-06-26T06:00:05.425Z
Updated: 2024-08-01T21:18:06.816Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25469 |
vulnerable | 2026-06-08 05:56:08.850109 |
WordPress Easy Table of Contents plugin <= 2.0.45.2 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in Magazine3 Easy Table of Contents allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Table of Contents: from n/a through 2.0.45.2.
Published: 2024-12-09T11:31:32.664Z
Updated: 2026-04-28T16:08:08.667Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.