Log in Start free

Toast Plugins

Products

ProductCVEsExploitedLatest
Animator3–Jul 16, 2025
Internal Link Optimiser3–Aug 13, 2026
Sticky Anything2–Apr 29, 2024
Toast Mobile Menu1–Oct 22, 2025

Exploited and recent CVEs

  • CVE-2026-66464 Medium 6.5 WordPress Internal Link Optimiser plugin <= 5.2.7 - Broken Access Control vulnerability 0.3%
  • CVE-2025-53238 High 7.1 WordPress Toast Mobile Menu plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-54039 Medium 4.3 WordPress Animator plugin <= 3.0.16 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
  • CVE-2025-39547 High 7.1 WordPress Internal Link Optimiser plugin <= 5.1.3 - CSRF to XSS vulnerability 0.2%
  • CVE-2025-32243 Medium 6.5 WordPress Internal Link Optimiser plugin <= 5.1.2 - Settings Change vulnerability 0.3%
  • CVE-2023-47689 Medium 6.5 WordPress Animator plugin <= 3.0.10 - Unauthenticated Plugin Settings Change Vulnerability 0.4%
  • CVE-2024-49308 High 7.1 WordPress Animator – Scroll Triggered Animations plugin <= 3.0.15 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-33646 High 7.1 WordPress Sticky Anything plugin <= 2.1.5 - Broken Access Control to XSS vulnerability 0.2%
  • CVE-2024-30551 High 7.1 WordPress Sticky Anything plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability 0.3%