Vulnerabilities and security researches forwordpressplugin-upgrade-time-out-plugin wordpressplugin-upgrade-time-out-plugin

Apr 25, 2025

CVE, Research URL: CVE-2024-8243
Home page URL: Security reports for WordPress/Plugin Upgrade Time Out Plugin
Application: WordPress/Plugin Upgrade Time Out Plugin
Date: Apr 09, 2025
Research Description: The WordPress/Plugin Upgrade Time Out Plugin WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.
Affected versions: max 1.0.
Status: vulnerable