[MEDIUM] WP Crontrol Authenticated (Administrator+) plugin vulnerable to Blind Server-Side Request Forgery

PKSA-s8n8-wvcv-s9wt CVE-2025-8678 GHSA-35c5-67fm-cpcp

Affected package: johnbillion/wp-crontrol

Affected version: >=1.17.0,<1.19.2

Reported by:
GitHub