Cron Logger <= 1.3.0 – Missing Authorization vulnerability

Cron Logger <= 1.3.0 – Missing Authorization Wordfence Intelligence > Vulnerability Database > Cron Logger <= 1.3.0 – Missing Authorization 4.3 Missing Authorization Publicly Published June 27, 2025 Last Updated July 1, 2025 Researcher Nguyen Xuan Chien Description The Cron Logger plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.3.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action. Doublicate for https://wordpress.org/support/topic/v1-3-0-is-vulnerable-to-broken-access-control/ Please look there for updates on this issue.