Timeline Block – tell your story with elegant timelines
Timeline Block – tell your story with elegant timelines has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 2 are fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10.
The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.
Every one of the 2 issues recorded for Timeline Block – tell your story with elegant timelines has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Timeline Block – tell your story with elegant timelines is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2025-26754Timeline Block <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Timeline Block – tell your story with elegant timelines
Author
bPlugins
Design stunning WordPress timelines without writing a single line of code – showcase your stories, projects, milestones, and events in a captivating format. Timeline Block | Pricing | Support | Demo Whether you need a company history timeline, an event schedule, a career timeline, or a product roadmap, Timeline Block provides tools to organize time-based content for your website. What Is Timeline Block? Timeline Block is a WordPress timeline plugin that lets you create responsive vertical and horizontal timelines directly in the Gutenberg Block Editor. Use it to present company history, project milestones, product roadmaps, events, personal achievements, stories, development progress, or any content that works better in chronological order. Choose a timeline layout, add your content, customize the settings, and publish. No coding knowledge is required. Key Features Two Free Themes: Customize the default theme to match your style and preferences. Timeline Type: Easily switch between horizontal and vertical layouts in the default theme. Start Index: Set the starting position (left or right) for both horizontal and vertical timelines. Display Item: Choose how many items to display in the horizontal timeline for a tailored view. Insert HTML in timeline title: Add custom HTML to enhance your timeline titles. Pro Features Pre-built Ready Templates: Access 35+ pre-built ready templates for instant timeline designs. Eight Extra Themes: Access Eight more professionally designed themes, some themes supporting both horizontal and vertical layouts. Classic Editor for Descriptions: Edit timeline descriptions beautifully with the integrated classic editor, providing advanced formatting options. Customizable Icons: Add unique icons to your timeline items and style them to create a polished, professional look. Enhanced Customization Options: Fine-tune every aspect of your timeline for ultimate design control. Animation: Add animation to your timeline items. Dynamic Post Timeline Block: Build automated timelines dynamically from any WordPress post type, filtered by taxonomy terms and author. Accordion Timeline Block: Group collapsible timeline steps with custom status markers, icon choices, and smooth interactive expand/collapse toggles. Company History Timeline Block: Feature a spotlit year card with a clickable year rail and optional auto-slide carousel navigation. Career Timeline Block: Showcase work experience, education, and career achievements with specialized timeline layouts. Media Story Timeline Block: Display rich media stories combining images, video highlights, and narrative timelines. Event Schedule Block: Present event agendas, schedules, and multi-track session timelines clearly. Roadmap Timeline Block: Organize product releases, project phases, and strategic milestones into clean roadmap views. Year Navigator Block: Navigate historical timelines effortlessly year-by-year. AI Content Generator: Generate timeline items, titles, and descriptions instantly using integrated AI tools. Load More Feature: Add a customizable Load More button with initial item counts, per-click reveal limits, and custom styling. Add Shortcode API: Embed timelines anywhere using a powerful shortcode system. Slideshow Timeline Block: Create slideshow timelines with autoplay and navigation controls. History Slider: Create history timeline slider with autoplay and navigation controls. Story Slider: Create story timeline slider with autoplay and navigation controls. Why Choose Timeline Block? Create beautiful and professional timelines without writing any code. **Beautiful timeline layouts ** — Showcase stories, events, milestones, and projects with attractive horizontal and vertical timelines. **Horizontal & vertical timeline support ** — Choose the perfect layout style to display your content. **Ready-made timeline themes ** — Use professionally designed themes to create stunning timelines quickly. **Easy Gutenberg integration ** — Add and customize timelines directly inside the WordPress block editor. **Fully customizable design ** — Adjust colors, fonts, icons, and styling options to match your website. **Shortcode support ** — Display your timelines anywhere on your WordPress website. **Responsive timeline design ** — Looks great on desktop, tablet, and mobile devices. **Lightweight & performance-friendly ** — Built for fast loading with optimized assets. Vertical Timeline Create vertical timelines for: Company history Career history Personal achievements Historical events Project milestones Educational content Product development Storytelling Classic Editor for Descriptions Format timeline descriptions using the integrated classic editor. Accordion Timeline Create collapsible timeline groups with: Expand and collapse interactions Custom status markers Icon options Grouped timeline steps Company History Timeline Create year-based company history timelines with: Year cards Clickable year navigation Timeline milestones Optional automatic navigation Media Story Timeline Combine media and narrative content in a chronological timeline. Use it for visual stories, project stories, events, and other media-rich content. Event Schedule Timeline Organize event agendas, schedules, sessions, and program timelines. This can be useful for: Conferences Workshops Events Programs Multi-session schedules Roadmap Timeline Create product and project roadmaps for: Product releases Development stages Project phases Feature milestones Future plans Year Navigator Navigate timeline content year by year using a dedicated year navigation interface. AI Timeline Content Generator Generate timeline items, titles, and descriptions using the integrated AI content generation feature. AI functionality may require supported configuration or services depending on the plugin version and setup. Load More Add a Load More button to supported timelines. Configure: Initial item count Items revealed per click Button styling Common Use Cases The plugin is useful for many types of WordPress websites: ✔ Company History: Highlight your business journey, achievements, and important milestones. ✔ Project Roadmaps: Display development stages, future plans, and product milestones. ✔ Product Launches: Showcase product releases, updates, and feature timelines. ✔ Personal Portfolios: Create career journeys, biographies, and achievement timelines. ✔ Educational Content: Present historical events, learning paths, and research timelines. ✔ Event Schedules: Organize conferences, programs, and important dates visually. ✔ Storytelling Websites: Create engaging visual stories with interactive timelines. How to use First, install the Timeline Block plugin Add the Timeline Block block from the block category called “Widgets” in the Gutenberg editor. You can change block settings from the right-side settings sidebar. Enjoy! For installation help click on Installation Tab Feedback Did you like this plugin? Dislike it? Do you have a feature request? Please share your feedback with us ⭐ Check out the Parent Plugin of this plugin- 🔥 B Blocks – Best gutenberg blocks collections for WordPress. ⭐ Check out our other WordPress Plugins- 🔥 Html5 Audio Player – Best audio player plugin for WordPress. 🔥 Html5 Video Player – Best video player plugin for WordPress. 🔥 PDF Poster – A fully-featured PDF Viewer Plugin for WordPress. 🔥 Document Embedder – Best WordPress Document Embedder Plugin. 🔥 3D Viewer – Display interactive 3D models on the webs. 🔥 Advanced Post Block – Best Post Display Plugin for WordPress. Source Code You can find the source code, report bugs, and contribute to the development of this plugin on our GitHub repository: Timeline Block on GitHub External Services This plugin bundles the following third-party JavaScript/PHP libraries. SVG Icons (Font Awesome, Lucide, etc.) Purpose: Provides scalable vector icons used for UI elements. Note: This plugin does not load the full Font Awesome or Lucide libraries. Instead, specific icons are included directly as inline SVGs in the source code to keep the plugin lightweight and performant. Freemius Lite SDK Version: 2.2.0 Source: https://bplugins.com/ GitHub: https://github.com/bPlugins/freemius-lite-sdk License: GPL-2.0-or-later – https://www.gnu.org/licenses/gpl-2.0.html Purpose: Provides an opt-in consent form for usage tracking and analytics to help improve the plugin. No data is sent before explicit user consent. External Services: Communicates with api.bplugins.com (activation events) and wp.freemius.com (opt-in processing) only after user opt-in. See bPlugins Privacy Policy and Freemius Privacy Policy. Timeline Version: 1.2.0 Source: assets/js/timeline.min.js, assets/css/timeline.min.css Author: Mike Collins License: MIT Purpose: A horizontal / vertical timeline component used for rendering timelines on the frontend. YouTube Source: https://www.youtube.com/ Purpose: Used to display documentation and tutorial videos in the admin dashboard. Privacy: Loading or interacting with the video player connects to YouTube servers and is subject to YouTube’s privacy policy. Third-Party Libraries Immer Version: 11.1.8 Source: https://immerjs.github.io/immer/ GitHub: https://github.com/immerjs/immer License: MIT Purpose: Used for managing immutable state in a more convenient way. bpl-tools Source / GitHub: https://github.com/bPlugins/bpl-tools License: GPL-2.0-or-later – https://www.gnu.org/licenses/gpl-2.0.html Purpose: Shared utility library providing admin dashboard components and common Gutenberg editor controls. External Services: The library may connect to bPlugins, WordPress.org, and Freemius services for product data and checkout functionality. See full details: https://github.com/bPlugins/bpl-tools#external-requests–why-they-are-made
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C