plugin
4 known security issues reported for the Timber Library WordPress plugin. Most recent disclosed Jul 24, 2025.
Running Timber Library on your site? Check whether your installed version is affected.
Scan your site freeThe Timber plugin for WordPress is utilizing a vulnerable version of Twig in all versions up to, and including, 1.23.1. It has not been confirmed if the package is exploitable in the plugin.
[en] Twig is a template language for PHP. Under some circumstances, the sandbox security checks are not run which allows user-contributed templates to bypass the sandbox restrictions. This vulnerability is fixed in 1.44.8, 2.16.1, and 3.14.0.
[en] Deserialization of Untrusted Data vulnerability in Timber Team & Contributors Timber.This issue affects Timber: from n/a through 1.23.0.
The Timber plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.23.0 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerabl...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free