Vulnerabilities

TI-2025-38472 CVE-2025-62150 · GHSA-pc8v-jwxm-4phx

WordPress History Timeline plugin <= 1.0.6 - Broken Access Control vulnerability

LOW 19

Missing Authorization vulnerability in themesawesome History Timeline timeline-awesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects History Timeline: from n/a through <= 1.0.…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00181 Published 2025-12-31 No fix listed CWE-862

TI-2024-12686 CVE-2024-13647 · GHSA-qm5f-3c7g-gj8r

School Management System – SakolaWP <= 1.0.8 - Cross-Site Request Forgery to Exam Setting Manipulation

LOW 19

The School Management System – SakolaWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00173 Published 2025-02-27 No fix listed CWE-352

TI-2024-11570 CVE-2024-12470 · GHSA-9g93-pxpv-276m

School Management System – SakolaWP <= 1.0.8 - Unauthenticated Privilege Escalation

MEDIUM 50

The School Management System – SakolaWP plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.0.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00659 Published 2025-01-07 No fix listed CWE-266

TI-2022-17402 CVE-2022-37328 · GHSA-cpqw-x96c-hvhh

WordPress History Timeline plugin <= 1.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

LOW 25

Authenticated (author+) Stored Cross-Site Scripting (XSS) vulnerability in Themes Awesome History Timeline plugin <= 1.0.5 at WordPress.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00571 Published 2022-09-23 No fix listed CWE-79

Vulnerabilities

Filters

WordPress History Timeline plugin <= 1.0.6 - Broken Access Control vulnerability

School Management System – SakolaWP <= 1.0.8 - Cross-Site Request Forgery to Exam Setting Manipulation

School Management System – SakolaWP <= 1.0.8 - Unauthenticated Privilege Escalation

WordPress History Timeline plugin <= 1.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability