CVE-2025-8678
1 advisory.
Packagist/johnbillion/wp-crontrol CVE-2025-8678: medium
WP Crontrol Authenticated (Administrator+) plugin vulnerable to Blind Server-Side Request Forgery
Action: Upgrade johnbillion/wp-crontrol to 1.19.2 or later.
composer require johnbillion/wp-crontrol:1.19.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.17.0 | 1.19.2 | - |
Fixed versions
| 1.19.2 |
Sources
- osv: GHSA-35c5-67fm-cpcp
- https://github.com/johnbillion/wp-crontrol/security/advisories/GHSA-35c5-67fm-cpcp
- https://github.com/johnbillion/wp-crontrol/commit/b085bd306588d7a9baed82de37f9d1818deafc44
- https://github.com/johnbillion/wp-crontrol
- https://github.com/johnbillion/wp-crontrol/releases/tag/1.19.2
CVE-2025-8678 · published · modified · JSON