266173 matches found
CVE-2025-68513
The CVE-2025-68513 entry concerns the WordPress Bold Timeline Lite plugin (bold-timeline-lite). Affected versions are up to 1.2.7, with a Stored Cross‑Site Scripting (XSS) flaw caused by improper neutralization/escaping of user-supplied data during web page generation. Exploitation is described a...
WordPress plugin Bold Timeline Lite 安全漏洞
WordPress Bold Timeline Lite plugin is a free plugin designed for creating dynamic timeline content on WordPress websites. The WordPress Bold Timeline Lite plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of...
PT-2025-53084
Name of the Vulnerable Software and Affected Versions Bold Timeline Lite versions through 1.2.7 Description The Bold Timeline Lite plugin contains a flaw due to improper neutralization of input during web page generation, leading to a Stored Cross-site Scripting XSS condition. This allows an...
CVE-2023-53945
creationtimestamp| type| source ---|---|--- 2025-12-19 23:50:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maeuz6ecfk2c 2025-12-22 00:08:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3majwwslswq2u...
CVE-2025-68143
creationtimestamp| type| source ---|---|--- 2025-12-18 01:19:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7z2vaucw2y 2026-01-21 01:53:22+00:00| seen| https://bsky.app/profile/cryptonews-poster.bsky.social/post/3mcvks7wnai24 2026-01-21 01:54:01+00:00| seen|...
CVE-2025-52582
creationtimestamp| type| source ---|---|--- 2025-12-16 22:00:11+00:00| seen| https://infosec.place/objects/ed1a5a31-0480-452f-90c1-adc3d1a5f5ab 2026-01-02 15:06:52+00:00| published-proof-of-concept| Telegram/tl7ZkdWd3jypcKJxG02Ippoc2qeVaXdMcRN35QCe67VLbs...
CVE-2025-64634
creationtimestamp| type| source ---|---|--- 2025-12-16 09:45:58+00:00| seen| https://gist.github.com/Darkcrai86/d93246a331d70cbcd62e5786a5f3997a 2026-01-12 20:07:23+00:00| seen| Telegram/8sAp-VzdCpmBtZpXHcIlhxzqtmWknERFSKz0UU7al4qy2OU...
CVE-2025-14032
The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'boldtimelinegroup' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2025-67727
creationtimestamp| type| source ---|---|--- 2025-12-12 07:32:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7rl3qjufj2q 2025-12-12 08:10:38+00:00| seen| https://gist.github.com/Darkcrai86/336c80a608d1c680c71671df6cccc755...
EUVD-2025-202986
The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'boldtimelinegroup' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2025-14032
The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'boldtimelinegroup' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2025-14032
CVE-2025-14032 affects Bold Timeline Lite (WordPress) up to version 1.2.7, exposing a Stored Cross‑Site Scripting (Stored XSS) via the title parameter in the bold_timeline_group shortcode. The issue stems from insufficient input sanitization and output escaping, enabling authenticated attackers w...
CVE-2025-14032 Bold Timeline Lite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Parameter in 'bold_timeline_group' Shortcode
The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'boldtimelinegroup' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2025-14032 Bold Timeline Lite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Parameter in 'bold_timeline_group' Shortcode
The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'boldtimelinegroup' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
PT-2025-50844
The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'bold timeline group' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...
WordPress plugin Bold Timeline Lite 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...
CVE-2025-13296
creationtimestamp| type| source ---|---|--- 2025-12-01 15:09:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6wpignm3w2s...
Attackers Actively Exploiting Critical Vulnerability in Post SMTP Plugin
On October 11th, 2025, we received a submission for an Account Takeover via Email Log Disclosure vulnerability in Post SMTP, a WordPress plugin with more than 400,000 active installations. This vulnerability makes it possible for an unauthenticated attacker to view email logs, including password...
CVE-2025-40198
creationtimestamp| type| source ---|---|--- 2025-11-12 23:51:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5htsunc442x 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...