WordPress plugin History Timeline 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

CVE-2025-62150: Missing Authorization

Missing Authorization vulnerability in themesawesome History Timeline timeline-awesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects History Timeline: from n/a through = 1.0.6...

WordPress Bold Timeline Lite plugin cross-site scripting vulnerability

WordPress Bold Timeline Lite plugin is a free plugin designed for creating dynamic timeline content on WordPress websites. The WordPress Bold Timeline Lite plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of...

WordPress Bold Timeline Lite plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin Bold Timeline Lite versions = 1.2.7...

CVE-2025-68513

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Stored XSS.This issue affects Bold Timeline Lite: from n/a through = 1.2.7...

EUVD-2025-205203

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Stored XSS.This issue affects Bold Timeline Lite: from n/a through = 1.2.7...

CVE-2025-68513

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Stored XSS.This issue affects Bold Timeline Lite: from n/a through = 1.2.7...

CVE-2025-68513

The CVE-2025-68513 entry concerns the WordPress Bold Timeline Lite plugin (bold-timeline-lite). Affected versions are up to 1.2.7, with a Stored Cross‑Site Scripting (XSS) flaw caused by improper neutralization/escaping of user-supplied data during web page generation. Exploitation is described a...

CVE-2025-68513 WordPress Bold Timeline Lite plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Stored XSS.This issue affects Bold Timeline Lite: from n/a through = 1.2.7...

CVE-2025-68513 WordPress Bold Timeline Lite plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Stored XSS.This issue affects Bold Timeline Lite: from n/a through = 1.2.7...

CVE-2025-68513: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Stored XSS.This issue affects Bold Timeline Lite: from n/a through = 1.2.7...

WordPress plugin Bold Timeline Lite 安全漏洞

WordPress Bold Timeline Lite plugin is a free plugin designed for creating dynamic timeline content on WordPress websites. The WordPress Bold Timeline Lite plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of...

PT-2025-53084

Name of the Vulnerable Software and Affected Versions Bold Timeline Lite versions through 1.2.7 Description The Bold Timeline Lite plugin contains a flaw due to improper neutralization of input during web page generation, leading to a Stored Cross-site Scripting XSS condition. This allows an...

CVE-2023-53945

creationtimestamp| type| source ---|---|--- 2025-12-19 23:50:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maeuz6ecfk2c 2025-12-22 00:08:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3majwwslswq2u...

CVE-2025-68143

creationtimestamp| type| source ---|---|--- 2025-12-18 01:19:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7z2vaucw2y 2026-01-21 01:53:22+00:00| seen| https://bsky.app/profile/cryptonews-poster.bsky.social/post/3mcvks7wnai24 2026-01-21 01:54:01+00:00| seen|...

CVE-2025-52582

creationtimestamp| type| source ---|---|--- 2025-12-16 22:00:11+00:00| seen| https://infosec.place/objects/ed1a5a31-0480-452f-90c1-adc3d1a5f5ab 2026-01-02 15:06:52+00:00| published-proof-of-concept| Telegram/tl7ZkdWd3jypcKJxG02Ippoc2qeVaXdMcRN35QCe67VLbs...

CVE-2025-64634

creationtimestamp| type| source ---|---|--- 2025-12-16 09:45:58+00:00| seen| https://gist.github.com/Darkcrai86/d93246a331d70cbcd62e5786a5f3997a 2026-01-12 20:07:23+00:00| seen| Telegram/8sAp-VzdCpmBtZpXHcIlhxzqtmWknERFSKz0UU7al4qy2OU...

CVE-2025-14032

The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'boldtimelinegroup' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2025-67727

creationtimestamp| type| source ---|---|--- 2025-12-12 07:32:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7rl3qjufj2q 2025-12-12 08:10:38+00:00| seen| https://gist.github.com/Darkcrai86/336c80a608d1c680c71671df6cccc755 2026-09-04 15:00:05+00:00| published-proof-of-concept|...

EUVD-2025-202986

The Bold Timeline Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in the 'boldtimelinegroup' shortcode in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...