B. Canavate

**Name of the Vulnerable Software and Affected Versions** WordPress Time Capsule Plugin version 1.21.16 **Description** An authentication bypass allows unauthenticated attackers to gain administrative access by sending a crafted POST request containing the `IWP JSON PREFIX` header. This flaw enables the acquisition of valid administrator session cookies, granting access to the WordPress dashboard without requiring credentials. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.