WordPress Plugin Upgrade Time Out Plugin Cross-Site Request Forgery Vulnerability Allowing Stored Cross-Site Scripting

A vulnerability exists in the WordPress Plugin Upgrade Time Out Plugin, specifically in versions through 1.0. The issue arises from the plugin's lack of proper Cross-Site Request Forgery (CSRF) checks in certain areas, combined with inadequate data sanitization and escaping. This vulnerability could enable attackers to exploit logged-in administrators by injecting Stored Cross-Site Scripting (XSS) payloads through a CSRF attack.

Impact

Exploitation of this vulnerability allows for the injection of Stored Cross-Site Scripting payloads, which are executed in the context of the user.