WordPress Timthumb Vulnerabilities

Wordpress Timthumb vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

6 December 2025

Stored Cross-Site Scripting in TR Timthumb Plugin for WordPress
CVE-2025-13899
WordPressTr Timthumb6.4MEDIUM

9 October 2023

WordPress Timthumb Vulnerability Scanner Plugin <= 1.54 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-44240
WordPressTimthumb Vulnerability...4.3MEDIUM

21 August 2014

Cross-Site Scripting Flaw in TimThumb Plugin for WordPress
CVE-2010-5302
WordPressTimthumb

26 October 2013

Remote Code Execution in TimThumb Plugin for WordPress
CVE-2011-4106
WordPressTimthumbEPSS 26%