Ddelower186

Products

Exploited and recent CVEs

• CVE-2025-6681 Medium 6.4 Fan Page <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter 0.2%
• CVE-2024-3944 Medium 4.4 WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Task Comments 0.3%
• CVE-2024-3946 Medium 4.4 WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Settings 0.3%
• CVE-2024-3947 Medium 4.3 WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_settings 0.2%
• CVE-2024-3945 Medium 4.3 WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_manage() 0.2%
• CVE-2024-3943 Medium 4.3 WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_addcomment 0.2%