Plugin has unpatched CSRF flaw and no updates
The plugin has a known cross-site request forgery flaw and its developer is not releasing further updates.
1 public report · first reported 13 December 2024 · last reported 13 December 2024
What's going wrong
Some site owners report that this plugin has a known cross-site request forgery vulnerability, reported by an outside security monitoring service. The reviewer notes that the developers are unlikely to release further updates, so the flaw may stay open. Owners of WordPress sites that still run the plugin are left with a choice between a risky install and a costly move to another tool. This creates an opening for a managed service that watches known plugin flaws, applies protective rules to vulnerable sites, and tells owners which plugins they should replace.
AI-assisted: written with the help of AI from the reports.
Products affected
Table of Contents Plus – Automatic Table of Contents for Posts & Pages.
Related problems
Who has this problem
1 business found.
Unlock them at the top of this page — $19.
All sales are final — no refunds.
Each business's name, the address it published, and the page it was published on. Paid through Stripe; you get a private page to bookmark, with a CSV download.