Wptimecapsule vulnerabilities
2 vulnerabilities
Known vulnerabilities in Wptimecapsule products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Time Capsule Plugin1 vulnerabilities
- Wp Time Capsule1 vulnerabilities
CVE-2020-37255wptimecapsuletime capsule plugin
EPSS score0.63%
WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by sending a crafted POST request with the IWP_JSON_PREFIX header. Attackers can exploit this flaw to obtain valid administrator session cookies and access the WordPress dashboard without providing credentials.CVE-2020-8771wordpresswp-time-capsule+1EPSS score46.45%
The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWP_JSON_PREFIX causes the client to be logged in as the first account on the list of administrator accounts.