CVE-2025-21599

creationtimestamp| type| source ---|---|--- 2025-01-09 16:48:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113799417683833601 2025-01-09 17:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfd6kb3fkl25 2025-01-09 17:21:06+00:00| seen|...

CVE-2024-12542

creationtimestamp| type| source ---|---|--- 2025-01-09 11:16:16+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhogqyj2a 2025-01-09 11:48:29+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113798237964155232 2025-01-09 12:15:30+00:00|...

CVE-2024-12736

creationtimestamp| type| source ---|---|--- 2025-01-09 06:15:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzoofiwo2k 2025-01-09 06:16:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113796932492439394 2025-01-09 06:17:07+00:00| seen|...

CVE-2024-12712

creationtimestamp| type| source ---|---|--- 2025-01-08 09:19:36+00:00| seen| https://infosec.exchange/users/cve/statuses/113791990246161883 2025-01-08 10:12:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/689 2025-01-08 10:15:21+00:00| seen|...

CVE-2024-9939

creationtimestamp| type| source ---|---|--- 2025-01-07 21:01:04+00:00| seen| https://bsky.app/profile/abrahack.bsky.social/post/3lf6k7fj6x22d 2025-01-08 08:34:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113791814054818001 2025-01-08 09:12:49+00:00| published-proof-of-concept|...

CVE-2025-22580

creationtimestamp| type| source ---|---|--- 2025-01-07 16:19:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62ibwtn325 2025-01-07 16:43:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lf63tfsaug25 2025-01-07 18:03:22+00:00| seen|...

CVE-2025-22584

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsPoint Timeline Pro timeline-pro allows DOM-Based XSS.This issue affects Timeline Pro: from n/a through = 1.3...

CVE-2025-22584 WordPress Timeline Pro plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsPoint Timeline Pro timeline-pro allows DOM-Based XSS.This issue affects Timeline Pro: from n/a through = 1.3...

CVE-2025-22584

CVE-2025-22584 affects Timeline Pro (Timeline Pro plugin) up to version 1.3 and is tied to an authenticated Stored Cross-Site Scripting (XSS) vulnerability in the Timeline Designer context. The issue arises from Improper Neutralization of Input During Web Page Generation, enabling an attacker wit...

CVE-2025-22584 WordPress Timeline Pro plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pluginspoint Timeline Pro allows DOM-Based XSS.This issue affects Timeline Pro: from n/a through 1.3...

WordPress Timeline Pro plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Timeline Pro versions = 1.3...

CVE-2024-11437

The Timeline Designer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to, and including, 1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2024-11437 Timeline Designer <= 1.4 - Authenticated (Admin+) SQL Injection

The Timeline Designer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to, and including, 1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2024-11437

CVE-2024-11437 affects Timeline Designer for WordPress. The timeline plugin is vulnerable to SQL Injection via the 's' parameter in all versions up to 1.4 due to insufficient escaping and improper query preparation. This could allow unauthenticated attackers to append additional SQL queries into ...

CVE-2024-11437 Timeline Designer <= 1.4 - Authenticated (Admin+) SQL Injection

The Timeline Designer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to, and including, 1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

PT-2025-4572 · Pluginspoint · Timeline Pro

Name of the Vulnerable Software and Affected Versions: pluginspoint Timeline Pro versions 1.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows DOM-Based XSS. This is a type of Cross-site Scripting attack. Recommendations: F...

PT-2025-1656

Name of the Vulnerable Software and Affected Versions Timeline Designer plugin for WordPress versions up to, and including, 1.4 Description The issue is related to SQL Injection via the s parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on t...

CVE-2025-22584: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsPoint Timeline Pro timeline-pro allows DOM-Based XSS.This issue affects Timeline Pro: from n/a through = 1.3...

CVE-2024-11437: Improper Neutralization of Special Elements used in an SQL Command

The Timeline Designer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to, and including, 1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

WordPress plugin Timeline Pro 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...