Cron management plugins can inspect, create, pause, delete, and immediately execute scheduled tasks that affect many parts of a WordPress site. WP Crontrol version 1.21.2 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-65702. The review focused on authorization for event management, request integrity, callback and argument display, custom schedules, URL validation, bulk actions, and exported event data.
| Name of | WP Crontrol |
| Version | 1.21.2 |
| Active installations | 300,000+ |
| Description | Provides administrative tools to view, add, edit, run, pause, resume, and delete WordPress cron events, manage custom schedules, and export event lists. |
| Security | Successfully tested for: SQL Injection (SQLi) Cross-Site Scripting (XSS) – Stored and Reflected Cross-Site Request Forgery (CSRF) Authentication Vulnerabilities Authentication Bypass Exploits Privilege Escalation Buffer Overflow Denial-of-Service (DoS) vectors Data Leakage Vulnerabilities Insecure Dependency Usage Remote Code Execution (RCE) Risks Unauthorized File Access Insufficient Injection Protection Information Disclosure via Misconfigured Endpoints |
| CleanTalk Certification | Proudly earned the “Plugin Security Certification” (PSC) from CleanTalk, indicating adherence to stringent security standards. |
| Additional Information | Use WP Crontrol with confidence backed by the “Plugin Security Certification” (PSC). Limit access to trusted administrators, document custom schedules, and test manual event execution on staging when a callback can change important site data. |
| Plugin Security Certification by CleanTalk |  |
| Logo of the plugin |  |
PSC by CleantalkJoin the community of developers who prioritize security. Highlight your plugin in the WordPress catalog.
Key Features
WP Crontrol lists scheduled WordPress cron events with their callbacks, arguments, schedules, and next run times. Administrators can add, edit, pause, resume, delete, or immediately run events, manage custom schedules, and export event lists as CSV. It also highlights missed events, missing actions, timezone details, and detected cron system problems. Version 1.21.2 confirms support for WordPress 7.1.
Security Assurance
The CleanTalk Plugin Security Certification evaluation examined capability checks and nonce validation for creating, changing, running, and deleting cron events. The review also considered event identifiers, schedules, callback and argument output, bulk operations, custom schedule input, URL restrictions, CSV export, and the handling of invalid or unusual event data.
The plugin has been successfully tested for:
✅ Information Leakage Vulnerabilities
✅ SQL Injection Vulnerabilities
✅ Cross-Site Scripting (XSS) Attacks
✅ Cross-Site Request Forgery (CSRF) Attacks
✅ Authentication and Authentication Bypass Vulnerabilities
✅ Privilege Escalation Vulnerabilities
✅ Buffer Overflow Vulnerabilities
✅ Denial-of-Service (DoS) Vulnerabilities
✅ Data Leakage Vulnerabilities
✅ Insecure Dependencies
✅ Code Execution Vulnerabilities
✅ File Unauthorized Access Vulnerabilities
✅ Insufficient Injection Protection
Conclusion
With PSC-2026-65702, WP Crontrol version 1.21.2 demonstrates a strong security baseline for privileged scheduled task management. The certification covers event permissions, request integrity, callback and argument presentation, custom schedules, URL checks, and bulk operations. Site owners should restrict access, review unfamiliar events before running them, and keep a record of intentional custom schedules.
Note: The date and certification information may change over time. It is advisable to verify the latest details on the plugin developer’s website.
