CVE-2021-25084

CVE-2021-25084 affects the Advanced Cron Manager WordPress plugin (and the Pro variant) where missing authorization checks in certain AJAX actions allow any authenticated user (e.g., a subscriber) to call them and add or remove events and schedules. Affected versions are WordPress Advanced Cron M...

CVE-2024-4004

The Advanced Cron Manager WordPress plugin versions prior to 2.5.7 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape specific plugin settings. This allows high-privilege users, such as administrators, to perform XSS attacks even in ...