WP To Do
WP To Do has 7 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 7 are fixed as of September 2026. Their average CVSS score is 4.9, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 7 disclosures.
The most common weakness is Cross-Site Scripting, behind 4 of the records (57%). Other recurring categories include Cross-Site Request Forgery (CSRF).
Every one of the 7 issues recorded for WP To Do has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, most of them (5) reported by Benedictus Jovan (aillesiM). WP To Do is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2024-37539WP To Do <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

WP To Do
Author
Md Delower Hossain
WP To Do is a full-featured to-do list and task management plugin for WordPress that helps you stay organized, manage priorities, and boost productivity — all from your WordPress dashboard. Perfect for individuals, teams, and businesses, WP To Do lets you easily create, organize, and track your tasks, checklists, and office memos in one place. Whether you’re planning daily work, managing projects, or tracking milestones, WP To Do brings simple yet powerful to do management directly into your site. Stay productive, meet deadlines, and manage your workflow seamlessly — without leaving WordPress. Features ✅ Powerful Task Management – Create and manage unlimited to-do lists and tasks – Assign priorities (Critical, High, Normal, Low) – Define statuses (Not Started, In Progress, In Review, Completed) – Add deadlines to ensure on-time completion ✅ Visual Workflow Tools – Interactive Kanban Board for drag-and-drop task organization – FullCalendar integration for scheduling and timeline view – Track milestones and progress visually ✅ Collaboration & Productivity – Add comments for better team communication – Use color-coded tasks for quick identification – Manage checklists and office memos in one unified dashboard ✅ User-Friendly Interface – Clean, responsive design integrated into the WordPress admin – Lightweight, fast, and easy to use Why Choose WP To do? Whether you’re managing personal tasks, planning your team’s projects, or keeping track of important office notes, WP-Todo makes to-do management simple, efficient, and visually intuitive. Turn your WordPress dashboard into a productivity hub and never miss a deadline again. Detailed Walkthrough Contribute This may have bugs and lack of many features. If you want to contribute on this project, you are more than welcome. Please fork the repository from Github. Custom Development & Feature Requests Need a custom feature or want to enhance Project Manager to fit your workflow? I provide custom WordPress plugin development, feature requests, and tailored solutions to make your project management seamless. Contact for Custom Development 🌐 Website: https://sandalia.com.bd/apps 💼 Upwork (Delower): https://www.upwork.com/freelancers/delower 💼 Linkedin (Delower): https://www.linkedin.com/in/delower186/ 💼 Linkedin (Sandalia): https://www.linkedin.com/company/sandalia-apps/ Do You need any Data Scraping Services? Try 🌐 Marketplace: https://apify.com/sandaliaapps Try My Other Plugins Project Manager Pro Project Manager Pro is a lightweight and easy-to-use plugin that allows you to create, manage, and track projects and tasks directly within WordPress. LLMs.txt Sitemap Manager LLMs.txt Sitemap Manager automatically generates an LLMs.txt file — a structured, lightweight list of important public URLs from your site — specifically designed for Large Language Models (LLMs) like ChatGPT, Perplexity, Claude, and other AI systems.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C