WP Chrono
WP Chrono has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for WP Chrono has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by SOPROBRO. WP Chrono is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.9.31.
CVE-2025-31747WP Chrono <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

WP Chrono
Author
milan.latinovic
Do you need simple CTM Content Time Management tool ? Do you need to provide users with content (i.e. Coupon Codes) only on specific time and date ? Do you want to create Content Dripping on your web pages using nothing but shortcodes ? WP Chrono provides you with predefined shortcodes for accomplishing various tasks related to controling WordPress content. If you want to accomplish these things easy: Show current time anywhere on your site Show certain parts of your posts/pages on specific dates Show certain parts of your posts/pages on specific date ranges Create IF-ELSE rules for displaying your content, related to specific dates Create lightweight countdown timer (plain JavaScript) with templating support This plugin pays special attention to multilanguage compatibility and e-commerce platforms compatibility: WPML compatible (https://wpml.org/plugin/wp-chrono/) WooCommerce Multilingual compatible qTranslate compatible WooCommerce compatible Currently supported shortcodes: [wpch-currentdate] – show current date & time [wpch-ifdate] – show content on specific date [wpch-ifdaterange] – show content on specific date range [wpch-countdowntimer] – create lightweight countdown timer for your content (templates supported!) Templates: darkblue, blue, darkpurple, purple, green, red, yellow
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C