Pricing
Case studies
Login
Start trial
WP To Do
Md Delower Hossain
Developer
2.1.7
Latest version
100
Installations
No date
Last updated
WordPress Plugin
No VDP
See changelog
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
0 present
7 patched
0 Mitigation rules
Cross-Site Request Forgery via wptodo_manage() vulnerability
<= 1.3.0
Feb 2, 2026
Authenticated (Admin+) Stored Cross-Site Scripting via Task Comments vulnerability
<= 1.3.0
Feb 2, 2026
Cross-Site Request Forgery via wptodo_settings vulnerability
<= 1.3.0
Feb 2, 2026
Cross Site Scripting (XSS) vulnerability
<= 1.3.0
Jul 6, 2024
Authenticated (Admin+) Stored Cross-Site Scripting via Settings vulnerability
<= 1.3.0
May 29, 2024
Multiple CSRF vulnerability
<= 1.3.0
May 29, 2024
Cross Site Scripting (XSS) vulnerability
<= 1.2.8
Jan 17, 2024