Toocheke

3 CVEs in 1 Toocheke product, including Toocheke Companion. Newest: CVE-2026-15604 (2026-08-16). Severity, EPSS and public exploits for each.

Toocheke products with known CVEs

ProductCVEs
Toocheke Companion3
Toocheke CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-15604Medium6.42026-08-16The Toocheke Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.10 via the 'series_bg_color' post…
CVE-2026-32403Medium6.52026-03-13Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in toocheke Toocheke Companion toocheke-companion allows DOM…
CVE-2025-23992Medium5.92025-01-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in toocheke Toocheke Companion toocheke-companion allows Sto…