Skip to content
OpenAdvisories

Package · Packagist

johnbillion/wp-crontrol

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.9
    CVE-2025-8678

    WP Crontrol - 1.17.0 - 1.19.1 - Authenticated (Administrator+) Blind Server-Side Request Forgery

    The WP Crontrol plugin for WordPress is vulnerable to blind Server-Side Request Forgery in versions 1.17.0 to 1.19.1 via the 'wp_remote_request' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make w…

    johnbillion WP Crontrol johnbillion/wp-crontrol Web / CMS Packagist
  • High 8.2
    CVE-2024-28850

    WP Crontrol possible RCE when combined with a pre-condition

    WP Crontrol controls the cron events on WordPress websites. WP Crontrol includes a feature that allows administrative users to create events in the WP-Cron system that store and execute PHP code subject to the restrictive security permissions documented here.…

    johnbillion WP Crontrol johnbillion/wp-crontrol Packagist