Toast Plugins vulnerabilities and threats

8 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.3%	CVE-2026-66464Internal Link Optimiser (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2026-08-13CVE Database V5CVE-2026-66464 Unauthenticated Broken Access Control in Internal Link Optimiser <= 5.2.7 versions. EPSS 0.3%Vulnerability Toast Plugins CWE-862 #ghsa-7v4h-xrw2-xw45	CVE Database V5	2026-08-13
High	7.1	EPSS 0.3%	CVE-2025-53238Toast Mobile Menu (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-10-22CVE Database V5CVE-2025-53238 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Toast Plugins Toast Mobile Menu toast-responsive-menu allows Stored XSS.This issue affects Toast Mobile Menu: from n/a through <= 1.0.8. EPSS 0.3%Vulnerability Toast Plugins	CVE Database V5	2025-10-22
Medium	4.3	EPSS 0.1%	CVE-2025-54039Animator (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-07-16CVE Database V5CVE-2025-54039 Cross-Site Request Forgery (CSRF) vulnerability in Toast Plugins Animator scroll-triggered-animations allows Cross Site Request Forgery.This issue affects Animator: from n/a through <= 3.0.16. EPSS 0.1%Vulnerability Toast Plugins	CVE Database V5	2025-07-16
High	7.1	EPSS 0.2%	CVE-2025-39547Internal Link Optimiser (WordPress plugin) · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.2%2025-04-16CVE Database V5CVE-2025-39547 Cross-Site Request Forgery (CSRF) vulnerability in Toast Plugins Internal Link Optimiser internal-link-finder allows Stored XSS.This issue affects Internal Link Optimiser: from n/a through <= 5.1.3. EPSS 0.2%Vulnerability Toast Plugins	CVE Database V5	2025-04-16
Medium	6.5	EPSS 0.3%	CVE-2025-32243Internal Link Optimiser (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2025-04-10CVE Database V5CVE-2025-32243 Missing Authorization vulnerability in Toast Plugins Internal Link Optimiser internal-link-finder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Internal Link Optimiser: from n/a through <= 5.1.2. EPSS 0.3%Vulnerability Toast Plugins	CVE Database V5	2025-04-10
High	7.1	EPSS 0.3%	CVE-2024-49308Animator (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2024-10-17CVE Database V5CVE-2024-49308 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Toast Plugins Animator scroll-triggered-animations allows Reflected XSS.This issue affects Animator: from n/a through <= 3.0.15. EPSS 0.3%Vulnerability Toast Plugins	CVE Database V5	2024-10-17
High	7.1	EPSS 0.2%	CVE-2024-33646Sticky Anything (WordPress plugin) · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.2%2024-04-29CVE Database V5CVE-2024-33646 Cross-Site Request Forgery (CSRF) vulnerability in Toast Plugins Sticky Anything allows Cross-Site Scripting (XSS).This issue affects Sticky Anything: from n/a through 2.1.5. EPSS 0.2%Vulnerability Toast Plugins CWE-352	CVE Database V5	2024-04-29
High	7.1	EPSS 0.3%	CVE-2024-30551Sticky Anything (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2024-03-31CVE Database V5CVE-2024-30551 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Toast Plugins Sticky Anything.This issue affects Sticky Anything: from n/a through 2.1.5. EPSS 0.3%Vulnerability Toast Plugins CWE-79	CVE Database V5	2024-03-31

Page 1 of 1