Wptimecapsule vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Wptimecapsule products: 1 record(s), with severity, exploitation and fixes.

Time Capsule Plugin 1

Exploited only (KEV) →

CVE-2020-37255 High · 7.5 CWE-288 Jun 20, 2026

WordPress Time Capsule Plugin 1.21.16 Authentication Bypass

WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by sending a crafted POST request with the IWP_JSON_PREFIX header. Attackers can exploit this flaw to obtain valid administrator session cookies and access the WordPress dashboard without providing credentials.