Crony Vulnerabilities

[en] Cross-Site Request Forgery (CSRF) vulnerability in Scott Kingsley Clark Crony Cronjob Manager.This issue affects Crony Cronjob Manager: from n/a through 0.5.0.

Affected:

up to 0.5.0

Fix:

No patched version reported

Disclosed:

Apr 15, 2024

CVE-2024-32102 on NVD →

The Crony Cronjob Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5.0. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an unknown action granted they can trick a...

CVSS:

4.3

Affected:

up to 0.5.0

Fix:

No patched version reported

Disclosed:

Apr 11, 2024

CVE-2024-32102 on NVD →

[en] WP_Admin_UI in the Crony Cronjob Manager plugin before 0.4.7 for WordPress has CSRF via the name parameter in an action=manage&do=create operation, as demonstrated by inserting XSS sequences.

Affected:

up to 0.4.7

Fixed in:

0.4.7

Disclosed:

Sep 18, 2017

CVE-2017-14530 on NVD →

WP_Admin_UI in the Crony Cronjob Manager plugin before 0.4.7 for WordPress has CSRF via the name parameter in an action=manage&do=create operation, as demonstrated by inserting XSS sequences.

CVSS:

8.8

Affected:

up to 0.4.7

Fixed in:

0.4.7

Disclosed:

Oct 27, 2015

CVE-2017-14530 on NVD →

This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Update the plugin.

Affected:

up to 0.4.6

Fixed in:

0.4.6

Disclosed:

Oct 27, 2015