CVE-2024-8243

The WordPress/Plugin Upgrade Time Out Plugin WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

PT-2025-15674

Name of the Vulnerable Software and Affected Versions: WordPress/Plugin Upgrade Time Out Plugin version 1.0 Description: The issue concerns a lack of CSRF check in some places, as well as missing sanitization and escaping, which could allow attackers to make logged-in admins add Stored XSS payloa...

CVE-2024-8243: Cross-Site Request Forgery (CSRF)

The WordPress/Plugin Upgrade Time Out Plugin WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...