WordPress/Plugin Upgrade Time Out Plugin, CVE-2024-8243

CVE, Research URL: CVE-2024-8243
Home page URL: Security reports for WordPress/Plugin Upgrade Time Out Plugin
Application: WordPress/Plugin Upgrade Time Out Plugin
Published on: Apr 09, 2025
Research Description: The WordPress/Plugin Upgrade Time Out Plugin WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.
Affected versions: max 1.0.
Status: vulnerable