CVE-2021-25084

CVE-2021-25084 affects the Advanced Cron Manager WordPress plugin (and the Pro variant) where missing authorization checks in certain AJAX actions allow any authenticated user (e.g., a subscriber) to call them and add or remove events and schedules. Affected versions are WordPress Advanced Cron M...

CVE-2024-4004

The Advanced Cron Manager WordPress plugin versions prior to 2.5.7 are vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the failure to properly sanitize and escape certain plugin settings. This flaw allows high-privilege users, such as administrators, to perform XSS att...