CVE-2024-28850
1 advisory.
Packagist/johnbillion/wp-crontrol CVE-2024-28850: high 8.1, EPSS 0.17%
WP Crontrol vulnerable to possible RCE when combined with a pre-condition
Action: Upgrade johnbillion/wp-crontrol to 1.16.2 or later.
composer require johnbillion/wp-crontrol:1.16.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.16.2 | - |
Fixed versions
| 1.16.2 |
Sources
- osv: GHSA-9xvf-cjvf-ff5q
- https://github.com/johnbillion/wp-crontrol/security/advisories/GHSA-9xvf-cjvf-ff5q
- https://github.com/johnbillion/wp-crontrol/commit/6d1fadcf6dfdd54e55feef27f916b0cfcd602405
- https://github.com/johnbillion/wp-crontrol
- https://github.com/johnbillion/wp-crontrol/releases/tag/1.16.2
- https://snicco.io/vulnerability-disclosure
- https://wp-crontrol.com/docs/php-cron-events
- https://wp-crontrol.com/help/check-php-cron-events
CVE-2024-28850 · published · modified · JSON