Approved changes feed: RSS · Atom

cpe:2.3:a:wptimecapsule:time_capsule_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWptimecapsule (256fc55f-1197-5c15-9641-da11332b594e)
ProductTime Capsule Plugin (8c570765-03b1-5dca-9c16-3b70c3ea8b0e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-37255 vulnerable 2026-07-28 20:15:20.199898 WordPress Time Capsule Plugin 1.21.16 Authentication Bypass
HIGH (7.5)
WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by sending a crafted POST request with the IWP_JSON_PREFIX header. Attackers can exploit this flaw to obtain valid administrator session cookies and access the WordPress dashboard without providing credentials.
Published: 2026-06-20T13:36:53.086Z
Updated: 2026-07-15T01:24:32.708Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.