Toolstack

9 CVEs across 4 Toolstack products. Browse Toolstack vulnerabilities, severities, and proof-of-concept exploits.

Toolstack products with known CVEs

ProductCVEs
Sully4
Cyan Backup2
Schedule Posts Calendar2
Auto Iframe1
Toolstack CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-9663Medium5.42025-05-15The CYAN Backup WordPress plugin before 2.5.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfor…
CVE-2024-9662Medium5.42025-05-15The CYAN Backup WordPress plugin before 2.5.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfor…
CVE-2024-10151Medium5.42025-01-08The Auto iFrame WordPress plugin before 2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the…
CVE-2024-5151High7.12024-07-13The SULly WordPress plugin before 4.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stor…
CVE-2024-5034High8.82024-07-13The SULly WordPress plugin before 4.3.1 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions…
CVE-2024-5033Medium5.92024-07-13The SULly WordPress plugin before 4.3.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers t…
CVE-2024-5032Medium4.72024-07-13The SULly WordPress plugin before 4.3.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scrip…
CVE-2023-40556Medium4.32023-10-06Cross-Site Request Forgery (CSRF) vulnerability in Greg Ross Schedule Posts Calendar plugin <= 5.2 versions.
CVE-2023-40560Medium5.92023-09-06Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Greg Ross Schedule Posts Calendar plugin <= 5.2 versions.