PatchTheCVEluckywp table of contents vulnerabilities and fixes
Recent CVEs affecting luckywp table of contents, with upgrade or downgrade steps. 2 tracked.
Also searched as: luckywptableofcontents.
luckywp table of contents has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-04-03. Highest priority: CVE-2024-9641 (score 29/100).
- CVE-2025-2299 MEDIUM 6.1 UPGRADE The LuckyWP Table of Contents plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions
- CVE-2024-9641 MEDIUM 4.8 UPGRADE The LuckyWP Table of Contents WordPress plugin before 2.1.7 does not sanitise and escape some of its settings,
FAQ
How do I fix luckywp table of contents vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is luckywp table of contents being exploited right now?
None of the tracked luckywp table of contents CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which luckywp table of contents CVE should I patch first?
CVE-2024-9641 currently ranks highest (29/100): The LuckyWP Table of Contents WordPress plugin before 2.1.7 does not sanitise and escape some of its settings,.