CVE-2024-8856

CVE-2024-8856：WordPress WP Time Capsule 插件任意文件上传漏洞 概述 CVE-2024-8856 是 WP Time Capsule WordPress 插件中存在的一个安全漏洞，允许未认证用户在服务器上上传任意文件。如果上传的文件被服务器执行，这可能导致远程代码执行。该漏洞源于不充分的文件验证，攻击者可通过向易受攻击的端点发送特制请求来利用此漏洞。 受影响版本 1.22.21 之前的 WP Time Capsule 插件版本（已在 1.22.22 中修复）。 影响 该漏洞允许未认证用户： 在服务器上上传恶意 PHP 脚本。...

CVE-2024-8856

CVE-2024-8856 此工具用于扫描 WordPress 网站中与 WP Time Capsule 插件相关的 CVE-2024-8856 漏洞。它会将低于 "1.22.22" 的插件版本识别为易受攻击，并将结果记录到 "vuln.txt"。它简单高效，可帮助安全研究人员和管理员快速检测并处理风险。 功能 扫描 URL 列表，以检测与 CVE-2024-8856 相关的 WP Time Capsule 插件漏洞。 将低于 1.22.22 的插件版本（例如 1.22.21、1.22.20）识别为易受攻击。 使用 Python 库（如 "requests"）发送 HTTP...

WPTimeCapsulePOC

Backup and Staging by WP Time Capsule 'administrator'; foreach $admins as $admin $us...

CVE-2026-8996: Missing Authorization

The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.22.26 via the downloadrecentdecryptedfilewptc. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

CVE-2026-42760: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Password Recovery Exploitation.This issue affects Backup and Staging by WP Time Capsule: from n/a through = 1.22.25...

EUVD-2021-11947

Malware in sbrugna...

EUVD-2024-42892

Malicious code in bioql PyPI...

EUVD-2024-43540

Malicious code in bioql PyPI...

EUVD-2025-17516

Malicious code in bioql PyPI...

EUVD-2024-37610

Malicious code in bioql PyPI...

WordPress Backup and Staging by WP Time Capsule plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Backup and Staging by WP Time Capsule plugin that stems from improper input neutralization and can be exploited by a...

CVE-2025-47477

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Reflected XSS.This issue affects Backup and Staging by WP Time Capsule: from n/a through = 1.22.23...

CVE-2025-47477

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Reflected XSS.This issue affects Backup and Staging by WP Time Capsule: from n/a through = 1.22.23...

CVE-2025-47477 WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.23 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in revmakx Backup and Staging by WP Time Capsule allows Reflected XSS. This issue affects Backup and Staging by WP Time Capsule: from n/a through 1.22.23...

CVE-2025-47477 WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.23 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Reflected XSS.This issue affects Backup and Staging by WP Time Capsule: from n/a through = 1.22.23...

PT-2025-24503 · WordPress · Backup/Staging By Wp Time Capsule

Name of the Vulnerable Software and Affected Versions: Backup and Staging by WP Time Capsule versions 1.22.23 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an...

CVE-2025-47477: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Reflected XSS.This issue affects Backup and Staging by WP Time Capsule: from n/a through = 1.22.23...

CVE-2021-25035

The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.7 does not sanitise and escape the error parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

WP Time Capsule 1.22.21 Shell Upload

WordPress WP Time Capsule plugin version 1.22.21 remote shell upload proof of concept exploit that takes advantage of a flaw discovered in 2024 by Rein Daelman...

CVE-2024-38770

Improper Privilege Management vulnerability in Revmakx Backup and Staging by WP Time Capsule allows Privilege Escalation, Authentication Bypass.This issue affects Backup and Staging by WP Time Capsule: from n/a through 1.22.20...