34 matches found
EUVD-2025-8758
Malicious code in bioql PyPI...
CVE-2025-31595
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdiscover Timeline Event History timeline-event-history allows Stored XSS.This issue affects Timeline Event History: from n/a through = 3.2...
WordPress Timeline Event History plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin Timeline Event History versions = 3.2...
CVE-2025-31595
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdiscover Timeline Event History timeline-event-history allows Stored XSS.This issue affects Timeline Event History: from n/a through = 3.2...
CVE-2025-31595 WordPress Timeline Event History plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdiscover Timeline Event History allows Stored XSS. This issue affects Timeline Event History: from n/a through 3.2...
CVE-2025-31595 WordPress Timeline Event History plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdiscover Timeline Event History timeline-event-history allows Stored XSS.This issue affects Timeline Event History: from n/a through = 3.2...
CVE-2025-31595
Technical details about CVE-2025-31595 (Timeline Event History) are not publicly provided in the supplied documents. Monitor for updates from advisories for affected versions, impact, and remediation.
WordPress plugin Timeline Event History 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...
CVE-2024-41473
creationtimestamp| type| source ---|---|--- 2024-07-26 01:16:48+00:00| seen| https://t.me/cvedetector/1655 2025-02-12 09:28:19+00:00| seen| https://infosec.exchange/users/shadowserver/statuses/113990205373134629 2025-02-12 09:29:27+00:00| seen|...
CVE-2024-5726
The Timeline Event History plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1 via deserialization of untrusted input 'timelines-data' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject...
CVE-2024-5726 Timeline Event History <= 3.1 - Authenticated (Contributor+) PHP Object Injection
The Timeline Event History plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1 via deserialization of untrusted input 'timelines-data' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject...
WordPress Timeline Event History plugin <= 3.1 - Authenticated (Contributor+) PHP Object Injection vulnerability
Authenticated Contributor+ PHP Object Injection vulnerability discovered by Francesco Carlucci in WordPress Plugin Timeline Event History versions = 3.1...
WordPress Timeline Event History Plugin <= 3.1 is vulnerable to PHP Object Injection
Software Timeline Event History Type Plugin Vulnerable versions = 3.1 Fixed in 3.2 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-5726 Patch priority Medium CVSS severity Medium 8.5 Developer Claim ownership PSID 38e5a517239e Credits Francesco Carlucci Required...