{"metadata": {"vulnerability": "CVE-2022-0236", "count": 20, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 12}}, "data": [{"timestamp": "2022-01-14T00:00:00Z", "date_only": false, "value": "2022-01-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-0236", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-01-18T16:52:22Z", "date_only": false, "value": "2022-01-18T16:52:22.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-0236", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-01-18T16:52:22Z", "date_only": false, "value": "2022-01-18T16:52:22.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2022-0236", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-01-18T17:15:00Z", "date_only": false, "value": "2022-01-18T17:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R35G-5XJR-P2G3", "record": "GHSA-R35G-5XJR-P2G3", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-01-18T17:15:00Z", "date_only": false, "value": "2022-01-18T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-0236", "record": "GSD-2022-0236", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-01-18T17:15:10.600Z", "date_only": false, "value": "2022-01-18T17:15:10.600", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-0236", "record": "FKIE_CVE-2022-0236", "field": "published"}, {"timestamp": "2022-01-18T20:25:01Z", "date_only": false, "value": "2022-01-18T20:25:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/35727", "record": "CVE-2022-0236", "field": "creation_timestamp", "uuid": "c58609ed-7f64-45ad-abbf-21426e5b10a3", "content": "\u203c CVE-2022-0236 \u203c\n\nThe WP Import Export WordPress plugin (both free and premium versions) is vulnerable to unauthenticated sensitive data disclosure due to a missing capability check on the download function wpie_process_file_download found in the ~/includes/classes/class-wpie-general.php file. This made it possible for unauthenticated attackers to download any imported or exported information from a vulnerable site which can contain sensitive information like user data. This affects versions up to, and including, 3.9.15.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/35727"}, {"timestamp": "2022-01-19T00:00:55Z", "date_only": false, "value": "2022-01-19T00:00:55Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R35G-5XJR-P2G3", "record": "GHSA-R35G-5XJR-P2G3", "field": "published"}, {"timestamp": "2022-01-24T17:29:00Z", "date_only": false, "value": "2022-01-24T17:29Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-0236", "record": "GSD-2022-0236", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-01-25T00:02:16Z", "date_only": false, "value": "2022-01-25T00:02:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R35G-5XJR-P2G3", "record": "GHSA-R35G-5XJR-P2G3", "field": "modified"}, {"timestamp": "2023-12-13T01:19:11.377Z", "date_only": false, "value": "2023-12-13T01:19:11.377306Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-0236", "record": "GSD-2022-0236", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T23:18:42.926Z", "date_only": false, "value": "2024-08-02T23:18:42.926Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-0236", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-31T18:56:42.634Z", "date_only": false, "value": "2025-01-31T18:56:42.634025Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-0236", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-31T18:56:42.634Z", "date_only": false, "value": "2025-01-31T18:56:42.634025Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-0236", "record": "FKIE_CVE-2022-0236", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-31T18:56:49.316Z", "date_only": false, "value": "2025-01-31T18:56:49.316Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-0236", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-31T18:56:49.316Z", "date_only": false, "value": "2025-01-31T18:56:49.316Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-0236", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-12-19T20:18:03Z", "date_only": false, "value": "2025-12-19T20:18:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Dooztoria/22", "record": "CVE-2022-0236", "field": "creation_timestamp", "uuid": "9147a3e0-9862-4f22-8a5c-2ccbb9f5371a", "content": "\ud83c\udf65 Overview of Vulnerable Endpoints in WordPress Applications\n\n    cves               path\n \nCVE-2022-2864  includes/settings.php                               \nCVE-2022-3227  includes/class-searchwp-live-ajax-search.php       \nCVE-2022-2941  admin/class-wp-useronline-admin.php               \nspecifiNoted   includes/class-wpvivid-backup.php                      \nCVE-2022-2436  includes/class-download-manager.php               \nCVE-2022-25148 includes/class-wp-statistics-hits.php               \nCVE-2022-1476  lib/model/class-ai1wm-backups.php                   \nCVE-2022-0236  includes/classes/class-wpie-general.php           \nCVE-2022-1119  includes/ee-downloader.php                       \nCVE-2022-0888  includes/class-ninja-forms-file-uploads.php", "url": "https://t.me/Dooztoria/22"}, {"timestamp": "2026-06-17T04:20:12.277Z", "date_only": false, "value": "2026-06-17T04:20:12.277", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-0236", "record": "FKIE_CVE-2022-0236", "field": "lastModified"}, {"timestamp": "2026-09-04T05:00:04.256Z", "date_only": false, "value": "2026-09-04T05:00:04.256373Z", "kind": "sighting", "label": "Seen", "source": "Telegram/wsozqluPl_W06A_oXbzfIKTVzNLR6fGSgCNc8JJ1fbOlU5U", "record": "CVE-2022-0236", "field": "creation_timestamp", "uuid": "283f29ea-8633-458e-a457-6b8257b7e19d"}, {"timestamp": "2026-09-05T01:00:38.921Z", "date_only": false, "value": "2026-09-05T01:00:38.921052Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wsozqluPl_W06A_oXbzfIKTVzNLR6fGSgCNc8JJ1fbOlU5U", "record": "CVE-2022-0236", "field": "creation_timestamp", "uuid": "0a2ae407-426f-432e-90d8-76422b689cbf"}]}