Vulnerabilities CVE-2020-37255

CVE-2020-37255

High

Open

TLP:CLEAR

WordPress Time Capsule Plugin 1.21.16 Authentication Bypass

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

WordPress Time Capsule Plugin 1.21.16 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access by sending a crafted POST request with the IWP_JSON_PREFIX header. Attackers can exploit this flaw to obtain valid administrator session cookies and access the WordPress dashboard without providing credentials.

Details

CVSS Score: 8.7
EPSS Score ⓘ: 0.63%

47.2th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Confidence: 90%
Published: Jun 20, 2026
Last Modified: Jul 15, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.