{"metadata": {"vulnerability": "CVE-2022-0953", "count": 32, "kinds": {"milestone": 4, "sighting": 8, "kev": 0, "other": 20}}, "data": [{"timestamp": "2022-03-14T00:00:00Z", "date_only": false, "value": "2022-03-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-0953", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-04-11T00:00:00Z", "date_only": false, "value": "2022-04-11T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202204-1224", "record": "VAR-202204-1224", "field": "sources_release_date.data.2.date", "linked_record": true}, {"timestamp": "2022-04-25T00:00:00Z", "date_only": false, "value": "2022-04-25T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202204-1224", "record": "VAR-202204-1224", "field": "sources_release_date.data.0.date", "linked_record": true}, {"timestamp": "2022-04-25T15:51:12Z", "date_only": false, "value": "2022-04-25T15:51:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-0953", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-04-25T15:51:12Z", "date_only": false, "value": "2022-04-25T15:51:12.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2022-0953", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-04-25T16:16:00Z", "date_only": false, "value": "2022-04-25T16:16:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GHRX-3G4W-H4HH", "record": "GHSA-GHRX-3G4W-H4HH", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2022-04-25T16:16:00Z", "date_only": false, "value": "2022-04-25T16:16Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-0953", "record": "GSD-2022-0953", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2022-04-25T16:16:08.170Z", "date_only": false, "value": "2022-04-25T16:16:08.170000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202204-1224", "record": "VAR-202204-1224", "field": "sources_release_date.data.3.date", "linked_record": true}, {"timestamp": "2022-04-25T16:16:08.170Z", "date_only": false, "value": "2022-04-25T16:16:08.170", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-0953", "record": "FKIE_CVE-2022-0953", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-04-25T20:36:15Z", "date_only": false, "value": "2022-04-25T20:36:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/41390", "record": "CVE-2022-0953", "field": "creation_timestamp", "uuid": "ddd97274-7990-4121-9cec-649a7b5138a9", "content": "\u203c CVE-2022-0953 \u203c\n\nThe Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.20.96 does not sanitise and escape the QUERY_STRING before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/41390"}, {"timestamp": "2022-04-26T00:00:40Z", "date_only": false, "value": "2022-04-26T00:00:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GHRX-3G4W-H4HH", "record": "GHSA-GHRX-3G4W-H4HH", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": false, "value": "2022-05-03T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202204-1224", "record": "VAR-202204-1224", "field": "sources_update_date.data.0.date", "linked_record": true}, {"timestamp": "2022-05-03T17:08:00Z", "date_only": false, "value": "2022-05-03T17:08Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-0953", "record": "GSD-2022-0953", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-05-04T00:00:30Z", "date_only": false, "value": "2022-05-04T00:00:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GHRX-3G4W-H4HH", "record": "GHSA-GHRX-3G4W-H4HH", "field": "modified", "linked_record": true}, {"timestamp": "2022-05-09T00:00:00Z", "date_only": true, "value": "2022-05-09", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-59799", "record": "CNVD-2022-59799", "field": "submitTime", "linked_record": true}, {"timestamp": "2022-06-26T15:16:02Z", "date_only": false, "value": "2022-06-26T15:16:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6276", "record": "CVE-2022-0953", "field": "creation_timestamp", "uuid": "695920b6-a2ba-4693-90e7-c6079f686f6c", "content": "#exploit\n1. CVE-2022-0953:\nWordPress Anti-Malware Security And Brute-Force Firewall Cross Site Scripting\nhttps://packetstormsecurity.com/files/166680/WordPress-Anti-Malware-Security-And-Brute-Force-Firewall-Cross-Site-Scripting.html\n\n2. CVE-2022-34305:\nApache Tomcat Cross-Site Scripting Vulnerability\nhttps://github.com/zeroc00I/CVE-2022-34305", "url": "https://t.me/CyberSecurityTechnologies/6276", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-06-30T00:00:00Z", "date_only": false, "value": "2022-06-30T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202204-1224", "record": "VAR-202204-1224", "field": "sources_update_date.data.2.date", "linked_record": true}, {"timestamp": "2022-08-26T00:00:00Z", "date_only": true, "value": "2022-08-26", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-59799", "record": "CNVD-2022-59799", "field": "openTime", "linked_record": true}, {"timestamp": "2023-08-08T00:00:00Z", "date_only": false, "value": "2023-08-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202204-1224", "record": "VAR-202204-1224", "field": "sources_release_date.data.1.date", "linked_record": true}, {"timestamp": "2023-08-08T07:09:00Z", "date_only": false, "value": "2023-08-08T07:09:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202204-1224", "record": "VAR-202204-1224", "field": "sources_update_date.data.1.date", "linked_record": true}, {"timestamp": "2023-12-13T01:19:11.528Z", "date_only": false, "value": "2023-12-13T01:19:11.528784Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-0953", "record": "GSD-2022-0953", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-02T23:47:42.945Z", "date_only": false, "value": "2024-08-02T23:47:42.945Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-0953", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T23:47:42.945Z", "date_only": false, "value": "2024-08-02T23:47:42.945Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-0953", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-21T06:39:44.090Z", "date_only": false, "value": "2024-11-21T06:39:44.090000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202204-1224", "record": "VAR-202204-1224", "field": "sources_update_date.data.3.date", "linked_record": true}, {"timestamp": "2024-11-23T22:04:54.995Z", "date_only": false, "value": "2024-11-23T22:04:54.995000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202204-1224", "record": "VAR-202204-1224", "field": "last_update_date", "linked_record": true}, {"timestamp": "2026-06-17T04:21:32.570Z", "date_only": false, "value": "2026-06-17T04:21:32.570", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-0953", "record": "FKIE_CVE-2022-0953", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-01T17:00:28.162Z", "date_only": false, "value": "2026-09-01T17:00:28.162038Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/5964", "record": "CVE-2022-0953", "field": "creation_timestamp", "uuid": "213d396e-e239-4a19-a746-91c4d6e30968", "url": "https://t.me/cissp/5964"}, {"timestamp": "2026-09-01T17:00:28.387Z", "date_only": false, "value": "2026-09-01T17:00:28.387691Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/5956", "record": "CVE-2022-0953", "field": "creation_timestamp", "uuid": "1894cdc4-8ee3-4e26-bef9-bcd9b39c880c", "url": "https://t.me/cissp/5956"}, {"timestamp": "2026-09-01T20:01:46.638Z", "date_only": false, "value": "2026-09-01T20:01:46.638521Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/49606", "record": "CVE-2022-0953", "field": "creation_timestamp", "uuid": "2ff02bec-12a2-42bf-a1b7-6bd53ea25b30", "url": "https://t.me/hacking_Attack/49606"}, {"timestamp": "2026-09-06T02:00:04.244Z", "date_only": false, "value": "2026-09-06T02:00:04.244573Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/49606", "record": "CVE-2022-0953", "field": "creation_timestamp", "uuid": "9b51327f-91c0-4cce-a799-8032ec28b532", "url": "https://t.me/hacking_Attack/49606", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-10T08:00:05.701Z", "date_only": false, "value": "2026-09-10T08:00:05.701979Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/5956", "record": "CVE-2022-0953", "field": "creation_timestamp", "uuid": "f480b618-64f3-475a-96e9-d7ab61d49983", "url": "https://t.me/cissp/5956", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-10T08:00:06.075Z", "date_only": false, "value": "2026-09-10T08:00:06.075753Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/5964", "record": "CVE-2022-0953", "field": "creation_timestamp", "uuid": "6141bfa1-e57f-4a1d-b0e7-1dcfe52629e0", "url": "https://t.me/cissp/5964", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-08T12:57:11.233Z", "anchors": {"origin": {"timestamp": "2022-04-25T15:51:12Z", "date_only": false, "value": "2022-04-25T15:51:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-0953", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-04-25T15:51:12Z", "date_only": false, "value": "2022-04-25T15:51:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-0953", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2022-06-26T15:16:02Z", "date_only": false, "value": "2022-06-26T15:16:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6276", "record": "CVE-2022-0953", "field": "creation_timestamp", "uuid": "695920b6-a2ba-4693-90e7-c6079f686f6c", "content": "#exploit\n1. CVE-2022-0953:\nWordPress Anti-Malware Security And Brute-Force Firewall Cross Site Scripting\nhttps://packetstormsecurity.com/files/166680/WordPress-Anti-Malware-Security-And-Brute-Force-Firewall-Cross-Site-Scripting.html\n\n2. CVE-2022-34305:\nApache Tomcat Cross-Site Scripting Vulnerability\nhttps://github.com/zeroc00I/CVE-2022-34305", "url": "https://t.me/CyberSecurityTechnologies/6276", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 5354690.0, "hours": 1487.4138888888888, "days": 61.975578703703704, "min_seconds": 5354690.0, "max_seconds": 5354690.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-04-25T15:51:12Z", "date_only": false, "value": "2022-04-25T15:51:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-0953", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-06-26T15:16:02Z", "date_only": false, "value": "2022-06-26T15:16:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6276", "record": "CVE-2022-0953", "field": "creation_timestamp", "uuid": "695920b6-a2ba-4693-90e7-c6079f686f6c", "content": "#exploit\n1. CVE-2022-0953:\nWordPress Anti-Malware Security And Brute-Force Firewall Cross Site Scripting\nhttps://packetstormsecurity.com/files/166680/WordPress-Anti-Malware-Security-And-Brute-Force-Firewall-Cross-Site-Scripting.html\n\n2. CVE-2022-34305:\nApache Tomcat Cross-Site Scripting Vulnerability\nhttps://github.com/zeroc00I/CVE-2022-34305", "url": "https://t.me/CyberSecurityTechnologies/6276", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 143240759.233418, "hours": 39789.09978706055, "days": 1657.8791577941897, "min_seconds": 143240759.233418, "max_seconds": 143240759.233418, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-04-25T15:51:12Z", "date_only": false, "value": "2022-04-25T15:51:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-0953", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T12:57:11.233Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 137886069.233418, "hours": 38301.685898171665, "days": 1595.903579090486, "min_seconds": 137886069.233418, "max_seconds": 137886069.233418, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-06-26T15:16:02Z", "date_only": false, "value": "2022-06-26T15:16:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6276", "record": "CVE-2022-0953", "field": "creation_timestamp", "uuid": "695920b6-a2ba-4693-90e7-c6079f686f6c", "content": "#exploit\n1. CVE-2022-0953:\nWordPress Anti-Malware Security And Brute-Force Firewall Cross Site Scripting\nhttps://packetstormsecurity.com/files/166680/WordPress-Anti-Malware-Security-And-Brute-Force-Firewall-Cross-Site-Scripting.html\n\n2. CVE-2022-34305:\nApache Tomcat Cross-Site Scripting Vulnerability\nhttps://github.com/zeroc00I/CVE-2022-34305", "url": "https://t.me/CyberSecurityTechnologies/6276", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-08T12:57:11.233Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}