CVE Database /
CVE-2024-49250
CVE · Medium
CVE-2024-49250 — Table of Contents Plus – Automatic Table of Contents for Posts & Pages [table-of-contents-plus] < 2411.1 (closed)
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-49250
|
Table of Contents Plus – Automatic Table of Contents for Posts & Pages [table-of-contents-plus] < 2411.1 (closed) |
Cross-Site Request Forgery (CSRF) |
Medium
4.3
|
< 2411.1
|
2411.1 |
2024-10-14 |
—
|
CVE-2024-49250
The Table of Contents Plus plugin for WordPress up to version 2408 contains a Cross-Site Request Forgery vulnerability caused by insufficient nonce verification in one of its functions. An unauthenticated attacker could exploit this flaw to execute unauthorized actions if they successfully deceive a site administrator into clicking a malicious link. The vulnerability was patched in version 2411.1.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings