CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Path Traversal: '.../...//' vulnerability in Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin wp-timelines.This issue affects WP Timeline – Vertical and Horizontal timeline plugin: from n/a through <= 3.6.7.
Explanation of Vulnerability in Simple Terms
The WP Timeline plugin for WordPress contains a vulnerability that allows authenticated users with low privileges to read sensitive data, modify site content, or disrupt service. The flaw requires network access and some technical setup to exploit, but does not require user interaction. All versions up to 3.6.7 are affected.
What an attacker can do
Read sensitive data, modify content, or disrupt the site's availability.
Potential impact on your site
A logged-in user with basic permissions could compromise data confidentiality, alter site content, or cause downtime.
Conditions required to exploit
Attacker must be authenticated with low-level user privileges and have network access.
Key dates
External resources
Related vulnerabilities
