WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
timber-library
Published
2025-07-24
Title
Timber < 1.23.3 - Use of a Vulnerable Dependency
Slug
time-based-greeting
Published
2025-04-24
Title
Time Based Greeting <= 2.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
time-clock
Published
2024-10-18
Title
Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution
Slug
time-clock
Published
2025-05-07
Title
Time Clock < 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
time-clock
Published
2025-10-23
Title
Time Clock – A WordPress Employee & Volunteer Time Clock Plugin < 1.3.2 - Authenticated (Custom+) Stored Cross-Site Scripting
Slug
time-clock-pro
Published
2024-10-18
Title
Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution
Slug
time-sheets
Published
2017-02-19
Title
Time Sheets < 1.5.2 - Multiple XSS
Slug
time-sheets
Published
2023-03-20
Title
Time Sheets < 1.29.3 - Admin+ Stored XSS
Slug
time-sheets
Published
2025-08-13
Title
Time Sheets <= 2.1.3 - Reflected Cross-Site Scripting
Slug
time-sheets
Published
2025-12-04
Title
Time Sheets <= 2.1.3 - Cross-Site Request Forgery
Slug
time-sheets
Published
2025-12-04
Title
Time Sheets <= 2.1.3 - Use of Known Vulnerable Component
Slug
time-tracker
Published
2025-09-10
Title
Time Tracker < 3.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Limited Data Deletion
Slug
timed-content
Published
2023-01-24
Title
Timed Content < 2.73 - Contributor+ Stored XSS
Slug
timeline
Published
2014-08-01
Title
Facebook Survey Pro - timeline/index.php id Parameter SQL Injection
Slug
timeline-and-history-slider
Published
2024-08-09
Title
Timeline and History slider < 2.4 - Authenticated (Contributor+) Local File Inclusion
Slug
timeline-and-history-slider
Published
2026-04-13
Title
Multiple Plugins by "Essential Plugin" - Backdoor
Slug
timeline-awesome
Published
2022-09-02
Title
History Timeline <= 1.0.6 - Author+ Stored Cross-Site Scripting
Slug
timeline-awesome
Published
2025-12-31
Title
History Timeline <= 1.0.6 - Missing Authorization
Slug
timeline-block-block
Published
2025-02-14
Title
Timeline Block < 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
timeline-block-block
Published
2026-02-05
Title
Timeline Block < 1.3.4 - Insecure Direct Object Reference to Authenticated (Author+) Private Timeline Exposure via Shortcode Attribute
Slug
timeline-blocks
Published
2026-04-27
Title
Timeline Blocks for Gutenberg < 1.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' Block Attribute
Slug
timeline-calendar
Published
2021-07-24
Title
Timeline Calendar <= 1.2 - Authenticated (admin+) SQL Injection
Slug
timeline-designer
Published
2025-01-06
Title
Timeline Designer < 1.4.1 - Admin+ SQL Injection
Slug
timeline-event-history
Published
2024-07-17
Title
Timeline Event History < 3.2 - Authenticated (Contributor+) PHP Object Injection
Slug
timeline-event-history
Published
2025-03-31
Title
Timeline Event History <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting