Skip to content
OpenAdvisories

Vendor

johnbillion

3 known vulnerabilities.

Products

WP Crontrol 2 Query Monitor 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-4267

    Query Monitor <= 3.20.3 - Reflected Cross-Site Scripting via Request URI

    The Query Monitor – The developer tools panel for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘$_SERVER['REQUEST_URI']’ parameter in all versions up to, and including, 3.20.3 due to insufficient input sanitization an…

    johnbillion Query Monitor johnbillion/query-monitor Web / CMS Packagist
  • High 8.2
    CVE-2024-28850

    WP Crontrol possible RCE when combined with a pre-condition

    WP Crontrol controls the cron events on WordPress websites. WP Crontrol includes a feature that allows administrative users to create events in the WP-Cron system that store and execute PHP code subject to the restrictive security permissions documented here.…

    johnbillion WP Crontrol johnbillion/wp-crontrol Packagist