Security Advisory

CVE-2020-37255

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-20 13:36:53

Last updated 2026-07-15 01:24:32

Assigner VulnCheck

CVSS score 8.7

State PUBLISHED

Description

WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by sending a crafted POST request with the IWP_JSON_PREFIX header. Attackers can exploit this flaw to obtain valid administrator session cookies and access the WordPress dashboard without providing credentials.

← Browse all CVEs View on cve.org ↗