← Back

Felixker

felixker

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Wordpress/plugin Upgrade Time Out Plugin
wordpress/plugin_upgrade_time_out_plugin
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-8243
1Felixker
1Wordpress/plugin Upgrade Time Out Plugin
Apr 22, 2025
Apr 9, 2025
N/A· v4
6.3 MEDIUM· v3
N/A· v2
The WordPress/Plugin Upgrade Time Out Plugin WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add...Show more
The WordPress/Plugin Upgrade Time Out Plugin WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.Show less