CyberSecBulletin

Johnbillion vulnerabilities

We track 2 vulnerabilities in Johnbillion products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 31, 2026.

2vulnerabilities
0critical
2high
0exploited
7.7average CVSS score

Latest Johnbillion vulnerabilities

  • 7.2 High severity

    Query Monitor: Improper Neutralization of Input During Web Page Generation

    CVE-2026-4267Johnbillion

    The Query Monitor – The developer tools panel for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘$_SERVER['REQUEST_URI']’ parameter in all versions up to, and including, 3.20.3 due to insufficient input sanitization and

  • 8.1 High severity

    wp-crontrol: Download of Code Without Integrity Check

    CVE-2024-28850Johnbillion

    WP Crontrol controls the cron events on WordPress websites. WP Crontrol includes a feature that allows administrative users to create events in the WP-Cron system that store and execute PHP code subject to the restrictive security permissions documented here.