cbcvebase.

Wptimecapsule Wp Time Capsule vulnerabilities

1 known vulnerability affecting wptimecapsule/wp_time_capsule.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2020-8771P2CRITICALCVSS 9.8PoCfixed in 1.21.162020-02-06
CVE-2020-8771 [CRITICAL] CWE-287 CVE-2020-8771: The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request conta The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWP_JSON_PREFIX causes the client to be logged in as the first account on the list of administrator accounts.
nvd
Wptimecapsule Wp Time Capsule vulnerabilities | cvebase