WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Table of Contents Plus – Automatic Table of Contents for Posts & Pages

Automatically add a table of contents to your posts and pages, with smooth scrolling, anchor links, and simple styling options.

5Reported vulnerabilities
5.4Highest CVSS score
202607.1Latest version
200,000+Active installs

What to do now

Update Table of Contents Plus – Automatic Table of Contents for Posts & Pages to 2411.1 or later. 5 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 26, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days
Affected versionsFixed inPublished
CVE-2022-4479 Medium 5.4 0.6% Before 2212 2212 January 9, 2023
CVE-2024-5578 Medium 4.8 0.4% 2408 and earlier 2411.1 November 5, 2024
CVE-2024-49250 Medium 4.3 0.2% 2408 and earlier 2411 October 14, 2024
CVE-2023-44473 Medium 4.3 0.2% 2302 and earlier 2309 September 29, 2023
WF-05206a31-033e-49b9-9b66-5a6165782643 Medium 4.4 Before 2309 2309 September 19, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.