VYPR

Task Scheduler

by WordPress

Source repositories

CVEs (2)

  • CVE-2025-32599HigApr 11, 2025
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in miunosoft Task Scheduler task-scheduler allows Reflected XSS.This issue affects Task Scheduler: from n/a through <= 1.6.3.

  • CVE-2025-10056MedOct 15, 2025
    risk 0.29cvss 4.4epss 0.00

    The Task Scheduler plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.3 via the “Check Website” task. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests…