CVE-2025-10056

Name of the Vulnerable Software and Affected Versions WordPress Task Scheduler plugin versions prior to 1.6.4

Description The Task Scheduler plugin for WordPress is susceptible to Server-Side Request Forgery. This affects authenticated attackers with Administrator-level access or higher. Attackers can leverage the “Check Website” task to make web requests to arbitrary locations from the web application. This can potentially allow querying and modification of information from internal services.

Recommendations Update the Task Scheduler plugin to version 1.6.4 or later.