{"action":"Upgrade johnbillion/wp-crontrol to 1.16.2 or later.","affected":[{"fixed":"1.16.2","introduced":"0"}],"component":"johnbillion/wp-crontrol","cve_ids":["CVE-2024-28850"],"ecosystem":"Packagist","epss":0.00166,"exploited":false,"fixed_versions":["1.16.2"],"ghsa_id":"GHSA-9xvf-cjvf-ff5q","id":"tcs_01M5KF0DQPZBXYZ96ACFTGVYME","modified_at":"2026-09-10T03:50:10.332786952Z","published_at":"2024-03-25T19:41:37Z","references":["https://osv.dev/vulnerability/GHSA-9xvf-cjvf-ff5q","https://github.com/johnbillion/wp-crontrol/security/advisories/GHSA-9xvf-cjvf-ff5q","https://github.com/johnbillion/wp-crontrol/commit/6d1fadcf6dfdd54e55feef27f916b0cfcd602405","https://github.com/johnbillion/wp-crontrol","https://github.com/johnbillion/wp-crontrol/releases/tag/1.16.2","https://snicco.io/vulnerability-disclosure","https://wp-crontrol.com/docs/php-cron-events","https://wp-crontrol.com/help/check-php-cron-events"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-9xvf-cjvf-ff5q","url":"https://osv.dev/vulnerability/GHSA-9xvf-cjvf-ff5q"}],"summary":"WP Crontrol vulnerable to possible RCE when combined with a pre-condition"}