https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T02:43:13.973166+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-1228 CVE-2026-1228 — Timeline Block <= 1.3.3 - Insecure Direct Object Reference to Authenticated (Author+) Private Timeline Exposure via Sho… 2026-10-17T02:43:13.974913+00:00

Affected: bplugins Timeline Block – Beautiful Timeline Builder for WordPress (Vertical & Horizontal Timelines)

The Timeline Block – Beautiful Timeline Builder for WordPress (Vertical & Horizontal Timelines) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.3 via the tlgb_shortcode() function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Author-level access and above, to disclose private timeline content via the id attribute supplied to the 'timeline_block' shortcode.