CVE-2024-5726CWE-502

Timeline Event History <= 3.1 - Authenticated (Contributor+) PHP Object Injection

High · published July 18, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
53.3
In the wild
Unconfirmed
What it is

The Timeline Event History plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1 via deserialization of untrusted input 'timelines-data' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00718 · 53.3th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2024-07-18T02:03Z
EPSS history
Timeline
  • 18 JUL 02:03Z
    Timeline Event History <= 3.1 - Authenticated (Contributor+) PHP Object Injection
    cvelistv5