WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
timeline-event-history
Published
2026-01-23
Title
Timeline Event History <= 3.2 - Reflected Cross-Site Scripting
Slug
timeline-event-history
Published
2026-02-09
Title
Timeline Event History <= 3.2 - Reflected Cross-Site Scripting
Slug
timeline-for-beaver-builder
Published
2024-07-09
Title
Timeline Module for Beaver Builder < 1.1.4 - Editor+ Stored XSS
Slug
timeline-pro
Published
2025-01-07
Title
Timeline Pro < 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via [placeholder]
Slug
timeline-widget-addon-for-elementor
Published
2024-02-06
Title
Timeline Widget For Elementor (Elementor Timeline, Vertical & Horizontal Timeline) < 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
timelineoptinpro
Published
2014-08-01
Title
timelineoptinpro - XSS
Slug
timely-booking-button
Published
2023-10-16
Title
Timely Booking Button <= 2.0.2 - Admin+ Stored XSS
Slug
timer-countdown
Published
2025-02-18
Title
Countdown Timer <= 1.0 - Reflected XSS
Slug
timesheet
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
timeslot
Published
2024-10-24
Title
Time Slot < 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
timeslot
Published
2025-11-18
Title
Time Slot < 1.4.8 - Unauthenticated Arbitrary Email Sending
Slug
timetics
Published
2024-06-13
Title
Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling Plugin < 1.0.22 - Missing Authorization to Limited Privilege Escalation
Slug
timetics
Published
2024-08-26
Title
Timetics < 1.0.24 - Authorization Bypass
Slug
timetics
Published
2024-10-16
Title
WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin < 1.0.26 - Insecure Direct Object Reference to Unauthenticated Arbitrary User Password/Email Reset/Account Takeover
Slug
timetics
Published
2024-12-12
Title
WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin < 1.0.28 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Deletion
Slug
timetics
Published
2025-03-27
Title
Timetics < 1.0.30 - Missing Authorization
Slug
timetics
Published
2025-11-22
Title
Timetics < 1.0.45 - Missing Authorization
Slug
timetics
Published
2026-01-05
Title
Appointment Booking and Scheduling Calendar Plugin – WP Timetics < 1.0.37 - Missing Authorization to Unauthenticated Booking Details View And Modification
Slug
timetics
Published
2026-01-05
Title
Timetics < 1.0.48 - Incorrect Authorization to Authenticated (Timetics Customer+) User Creation
Slug
timetics
Published
2026-02-19
Title
Timetics < 1.0.52 - Unauthenticated Payment/Booking Status Update
Slug
timetics
Published
2026-04-07
Title
Timetics – Appointment Booking & Scheduling < 1.0.54 - Missing Authorization
Slug
timetics
Published
2026-06-30
Title
Timetics – Appointment Booking Calendar & Scheduling System < 1.0.59 - Unauthenticated Stored Cross-Site Scripting
Slug
timetics
Published
2026-07-01
Title
Timetics < 1.0.57 - Unauthenticated Booking Auto-Approval via Arbitrary payment_method
Slug
timetics
Published
2026-09-03
Title
Timetics – Appointment Booking Calendar & Scheduling < 1.0.62 - Missing Authorization
Slug
timetics
Published
2026-08-26
Title
Timetics < 1.0.62 - Staff+ Cross-Staff Appointment Modification via IDOR