Vulnerabilidades de Wptimecapsule

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Wptimecapsule: 1 registro(s), com severidade, exploração e correções.

Time Capsule Plugin 1

Somente exploradas (KEV) →

CVE-2020-37255 Alta · 7.5 CWE-288 20/06/2026

WordPress Time Capsule Plugin 1.21.16 Authentication Bypass

WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by sending a crafted POST request with the IWP_JSON_PREFIX header. Attackers can exploit this flaw to obtain valid administrator session cookies and access the WordPress dashboard without providing credentials.