wp_time_capsule 漏洞

严重CVE-2024-88562024/09/13

WP Time Capsule Plugin - Remote Code Execution

The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the the UploadHandler.php file and no direct file access prevention in all versions up to, and including, 1.22.21. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

wp_time_capsulePoC 已收录

CVSS9.8EPSS 92.0%

严重CVE-2020-87712020/02/07

WordPress Time Capsule < 1.21.16 - Authentication Bypass

WordPress Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWP_JSON_PREFIX causes the client to be logged in as the first account on the list of administrator accounts.

wp_time_capsulePoC 已收录RCE

CVSS9.8EPSS 85.0%

wp_time_capsule

关联漏洞

WP Time Capsule Plugin - Remote Code Execution

WordPress Time Capsule < 1.21.16 - Authentication Bypass