Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Toast Plugins vulnerabilities

9 published CVEs name Toast Plugins among the affected products.

Newest CVEs

  • CVE-2026-66464

    WordPress Internal Link Optimiser plugin <= 5.2.7 - Broken Access Control vulnerability

    Toast Plugins · Internal Link Optimiser

    Medium6.5
  • CVE-2025-53238

    WordPress Toast Mobile Menu plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability

    Toast Plugins · Toast Mobile Menu

    High7.1
  • CVE-2025-54039

    WordPress Animator plugin <= 3.0.16 - Cross Site Request Forgery (CSRF) Vulnerability

    Toast Plugins · Animator

    Medium4.3
  • CVE-2025-39547

    WordPress Internal Link Optimiser plugin <= 5.1.3 - CSRF to XSS vulnerability

    Toast Plugins · Internal Link Optimiser

    High7.1
  • CVE-2025-32243

    WordPress Internal Link Optimiser plugin <= 5.1.2 - Settings Change vulnerability

    Toast Plugins · Internal Link Optimiser

    Medium6.5
  • CVE-2023-47689

    WordPress Animator plugin <= 3.0.10 - Unauthenticated Plugin Settings Change Vulnerability

    Toast Plugins · Animator

    Medium6.5
  • CVE-2024-49308

    WordPress Animator – Scroll Triggered Animations plugin <= 3.0.15 - Reflected Cross Site Scripting (XSS) vulnerability

    Toast Plugins · Animator

    High7.1
  • CVE-2024-33646

    WordPress Sticky Anything plugin <= 2.1.5 - Broken Access Control to XSS vulnerability

    Toast Plugins · Sticky Anything

    High7.1
  • CVE-2024-30551

    WordPress Sticky Anything plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability

    Toast Plugins · Sticky Anything

    High7.1