Toast Plugins

9 CVEs across 4 Toast Plugins products. Browse Toast Plugins vulnerabilities, severities, and proof-of-concept exploits.

Toast Plugins products with known CVEs

ProductCVEs
Animator3
Internal Link Optimiser3
Sticky Anything2
Toast Mobile Menu1
Toast Plugins CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-66464Medium6.52026-08-13Unauthenticated Broken Access Control in Internal Link Optimiser <= 5.2.7 versions.
CVE-2025-53238High7.12025-10-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Toast Plugins Toast Mobile Menu toast-responsive-menu all…
CVE-2025-54039Medium4.32025-07-16Cross-Site Request Forgery (CSRF) vulnerability in Toast Plugins Animator scroll-triggered-animations allows Cross Site Request Forgery.This issue affects Anim…
CVE-2025-39547High7.12025-04-16Cross-Site Request Forgery (CSRF) vulnerability in Toast Plugins Internal Link Optimiser internal-link-finder allows Stored XSS.This issue affects Internal Lin…
CVE-2025-32243Medium6.52025-04-10Missing Authorization vulnerability in Toast Plugins Internal Link Optimiser internal-link-finder allows Exploiting Incorrectly Configured Access Control Secur…
CVE-2023-47689Medium6.52025-01-02Missing Authorization vulnerability in Toast Plugins Animator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animat…
CVE-2024-49308High7.12024-10-17Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Toast Plugins Animator scroll-triggered-animations allows…
CVE-2024-33646High7.12024-04-29Cross-Site Request Forgery (CSRF) vulnerability in Toast Plugins Sticky Anything allows Cross-Site Scripting (XSS).This issue affects Sticky Anything: from n/a…
CVE-2024-30551High7.12024-03-31Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Toast Plugins Sticky Anything.This issue affects Sticky A…