Skip to content
OpenAdvisories

Vendor

wpdiscover

8 known vulnerabilities.

Products

Timeline Event History 4 Social Feed Gallery Portfolio 1 Photo Gallery Builder 1 Accordion Slider Gallery 1 Blog Manager WP 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2025-69384

    WordPress Timeline Event History plugin <= 3.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdiscover Timeline Event History timeline-event-history allows Reflected XSS.This issue affects Timeline Event History: from n/a through <= 3.2.

    wpdiscover Timeline Event History
  • High 8.8
    CVE-2024-5726

    Timeline Event History <= 3.1 - Authenticated (Contributor+) PHP Object Injection

    The Timeline Event History plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1 via deserialization of untrusted input 'timelines-data' parameter. This makes it possible for authenticated attackers, with Contrib…

    wpdiscover Timeline Event History Web / CMS