Cron Setup and Monitor – Get URL Cron
Cron Setup and Monitor – Get URL Cron has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; all 2 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high. 2023 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Missing Authorization.
Every one of the 2 issues recorded for Cron Setup and Monitor – Get URL Cron has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by Rio Darmawan. Cron Setup and Monitor – Get URL Cron is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
Get URL Cron <= 1.4.7 - Missing Authorization via geturlcron_action_handle
Read the full analysisVulnerability Records

Cron Setup and Monitor – Get URL Cron
Author
berkux
Effortlessly define and manage cron jobs with execution URLs and WP shortcodes. The plugin monitors cron jobs, retries failed executions as needed, and sends status updates via email. With “Cron Setup and Monitor – Get URL Cron” you can: Add, edit, and delete cron jobs to request HTTP URLs or WordPress shortcodes at defined times with various intervals. Verify the retrieved result by checking for a required string or JSON field to ensure the request was successful. Retry the HTTP URL or shortcode request multiple times in case of failures. Display all cron jobs in the WordPress installation, including those independent of this plugin. Manually execute cron jobs. Log requests and show OK or FAIL status in a database-backed log. Send emails for each cron job execution, including start attempt and result. Option to send emails only on failure. System Check page: verify PHP version, WordPress cron status, loopback requests, outgoing HTTP, and SSL support. Usage Go to ‘Basic Settings’ in the plugin menu to set basic settings (e.g. e-mail address for status messages). Go to ‘Set CronJobs’ to manage cron events: set URL or WordPress shortcode, interval, start date, etc. Save the defined cron jobs. Manually execute a cron job by clicking “Execute Job”. Check plugin menu ‘Show CronJobs’: the scheduled cron jobs “geturlcron_event-” should be listed there. Check plugin menu ‘Show Logs’: completed jobs show OK or FAIL status. If an e-mail address is defined, e-mails are sent for each attempt and result.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C