Wpdiscover vulnerabilities
We track 3 vulnerabilities in Wpdiscover products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 20, 2026.
Latest Wpdiscover vulnerabilities
- 7.1 High severity
Timeline Event History: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdiscover Timeline Event History timeline-event-history allows Reflected XSS.This issue affects Timeline Event History: from n/a through <= 3.2.
- 8.8 High severity
Photo Gallery Builder: Missing Authorization
Missing Authorization vulnerability in wpdiscover Photo Gallery Builder photo-gallery-builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Photo Gallery Builder: from n/a through <= 3.0.
- 8.8 High severity
Timeline Event History: Deserialization of Untrusted Data
The Timeline Event History plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1 via deserialization of untrusted input 'timelines-data' parameter. This makes it possible for authenticated attackers, with Contribu