How many vulnerabilities does LuckyWP Table of Contents have?

The audit found 341 findings: 0 critical, 80 high, 131 medium severity.

Should I use LuckyWP Table of Contents?

Based on the latest audit (grade C, risk HIGH), review the 341 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

LuckyWP Table of Contents

Q: Is LuckyWP Table of Contents secure?

WP HealthKit's independent audit rates LuckyWP Table of Contents overall risk as HIGH with a report-card grade of C.

v2.1.14WordPress Plugin100K+ installs4.9Audited 120 days ago

HIGH

Total Findings

341

Security Grade

Active Installs

100K+

Coding Score

100/100

Security Findings

341

Critical0

High80

Medium131

Low2

Info128

Executive Summary

Is LuckyWP Table of Contents secure? In WP HealthKit's independent 2026 audit, LuckyWP Table of Contents received an overall risk of HIGH and a report-card grade of C across 341 findings (0 critical, 80 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

Readiness

Coding Standards

100/100

PHP Compatibility

Requires PHP 8.0

Categories with Findings

PHP CompatibilityCross-Site ScriptingType SafetyWordPress CompatibilityPlugin ConflictsInternationalizationAI-Generated CodePerformance

Plugin Info

Active Installs: 100K+
WP.org Rating: 4.9
Requires WP: 4.7+
Tested Up To: 6.7.5
Requires PHP: 5.6.20+
Audit Count: 1
Type: plugin

Embed Audit Badge

Show your audit status in your README or website.

[![LuckyWP Table of Contents security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/luckywp-table-of-contents)](https://wphealthkit.com/directory/luckywp-table-of-contents)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin