Beveiligingsadvies

CVE-2020-37255

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-20 13:36:53

Laatst bijgewerkt 2026-07-15 01:24:32

Toegewezen door VulnCheck

CVSS-score 8.7

Status PUBLISHED

Beschrijving

WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by sending a crafted POST request with the IWP_JSON_PREFIX header. Attackers can exploit this flaw to obtain valid administrator session cookies and access the WordPress dashboard without providing credentials.

← Alle CVE's bekijken Bekijk op cve.org ↗