{"metadata": {"vulnerability": "CVE-2023-3452", "count": 26, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 15}}, "data": [{"timestamp": "2023-06-28T00:00:00Z", "date_only": false, "value": "2023-06-28T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2023-3452", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2023-06-28T19:14:28.550Z", "date_only": false, "value": "2023-06-28T19:14:28.550Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-3452", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-07-17T00:00:00Z", "date_only": false, "value": "2023-07-17T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2023-3452", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2023-08-09T00:00:00Z", "date_only": false, "value": "2023-08-09T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2023-3452", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2023-08-12T02:05:19.117Z", "date_only": false, "value": "2023-08-12T02:05:19.117Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-3452", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-08-12T03:15:00Z", "date_only": false, "value": "2023-08-12T03:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-3452", "record": "GSD-2023-3452", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-08-12T03:15:09Z", "date_only": false, "value": "2023-08-12T03:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R7J9-2QV5-FPM9", "record": "GHSA-R7J9-2QV5-FPM9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-08-12T03:15:09.330Z", "date_only": false, "value": "2023-08-12T03:15:09.330", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-3452", "record": "FKIE_CVE-2023-3452", "field": "published"}, {"timestamp": "2023-08-12T03:30:18Z", "date_only": false, "value": "2023-08-12T03:30:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R7J9-2QV5-FPM9", "record": "GHSA-R7J9-2QV5-FPM9", "field": "published"}, {"timestamp": "2023-08-12T07:17:07Z", "date_only": false, "value": "2023-08-12T07:17:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/68387", "record": "CVE-2023-3452", "field": "creation_timestamp", "uuid": "541ef94b-9b24-4770-8320-11e6328e2c09", "content": "\u203c CVE-2023-3452 \u203c\n\nThe Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter. This allows unauthenticated attackers to include and execute arbitrary remote code on the server, provided that allow_url_include is enabled. Local File Inclusion is also possible, albeit less useful because it requires that the attacker be able to upload a malicious php file via FTP or some other means into a directory readable by the web server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/68387"}, {"timestamp": "2023-08-18T15:03:00Z", "date_only": false, "value": "2023-08-18T15:03Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-3452", "record": "GSD-2023-3452", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-11-23T18:51:42Z", "date_only": false, "value": "2023-11-23T18:51:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5930", "record": "CVE-2023-3452", "field": "creation_timestamp", "uuid": "8c40a66e-8261-4281-8520-4fac5b09095d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aWordpress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE)\nURL\uff1ahttps://github.com/leoanggal1/CVE-2023-3452-PoC\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/5930"}, {"timestamp": "2023-11-25T12:25:42Z", "date_only": false, "value": "2023-11-25T12:25:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9459", "record": "CVE-2023-3452", "field": "creation_timestamp", "uuid": "9a6f4aa6-cddf-4466-a5a0-db333cfec6e0", "content": "#exploit\n1. CVE-2023-47444:\nAuthenticated Static Code Injections in OpenCart\nhttps://0xbro.red/disclosures/disclosed-vulnerabilities/opencart-cve-2023-47444\n\n2. CVE-2022-41853:\nUsing static functions to obtian RCE via Java Deserialization & Remote Codebase Attack\nhttps://github.com/mbadanoiu/CVE-2022-41853\n\n3. CVE-2023-3452:\nWordpress Plugin Canto < 3.0.5 - RFI/RCE Unauthenticated\nhttps://github.com/leoanggal1/CVE-2023-3452-PoC", "url": "https://t.me/CyberSecurityTechnologies/9459"}, {"timestamp": "2023-12-13T01:20:54.791Z", "date_only": false, "value": "2023-12-13T01:20:54.791870Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-3452", "record": "GSD-2023-3452", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-29T05:06:09Z", "date_only": false, "value": "2024-03-29T05:06:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2201", "record": "CVE-2023-3452", "field": "creation_timestamp", "uuid": "786c2088-c1d7-40d8-8f6c-67f12a7c799d", "content": "https://github.com/leoanggal1/CVE-2023-3452-PoC\n\nWordpress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE)\n#github #poc", "url": "https://t.me/CNArsenal/2201"}, {"timestamp": "2024-03-30T17:23:45Z", "date_only": false, "value": "2024-03-30T17:23:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/iGW_5A0oZkZcyB-GkqlrOVgdjCeQTucngSvvwjWlsOYRomA", "record": "CVE-2023-3452", "field": "creation_timestamp", "uuid": "2d42b2db-cee7-4c8e-8615-8779054f7cd6"}, {"timestamp": "2024-04-04T06:53:37Z", "date_only": false, "value": "2024-04-04T06:53:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R7J9-2QV5-FPM9", "record": "GHSA-R7J9-2QV5-FPM9", "field": "modified"}, {"timestamp": "2024-08-02T06:55:03.333Z", "date_only": false, "value": "2024-08-02T06:55:03.333Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-3452", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-16T08:52:58Z", "date_only": false, "value": "2024-08-16T08:52:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/2096", "record": "CVE-2023-3452", "field": "creation_timestamp", "uuid": "a2733214-a5f7-405c-88f0-370096ede123", "content": "#exploit\n1. CVE-2023-47444:\nAuthenticated Static Code Injections in OpenCart\nhttps://0xbro.red/disclosures/disclosed-vulnerabilities/opencart-cve-2023-47444\n\n2. CVE-2022-41853:\nUsing static functions to obtian RCE via Java Deserialization & Remote Codebase Attack\nhttps://github.com/mbadanoiu/CVE-2022-41853\n\n3. CVE-2023-3452:\nWordpress Plugin Canto < 3.0.5 - RFI/RCE Unauthenticated\nhttps://github.com/leoanggal1/CVE-2023-3452-PoC", "url": "https://t.me/Rootsec_2/2096"}, {"timestamp": "2024-10-11T16:52:35.319Z", "date_only": false, "value": "2024-10-11T16:52:35.319154Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-3452", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-11T16:52:35.319Z", "date_only": false, "value": "2024-10-11T16:52:35.319154Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-3452", "record": "FKIE_CVE-2023-3452", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-11T16:54:05.577Z", "date_only": false, "value": "2024-10-11T16:54:05.577Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-3452", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-02-25T21:02:30.562Z", "date_only": false, "value": "2026-02-25T21:02:30.562071Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mfpld7v5fb2w", "record": "CVE-2023-3452", "field": "creation_timestamp", "uuid": "e1459dd3-5acf-4f1e-b950-2e97d15053e6", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mfpld7v5fb2w"}, {"timestamp": "2026-04-08T17:13:38.027Z", "date_only": false, "value": "2026-04-08T17:13:38.027Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-3452", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T17:13:38.027Z", "date_only": false, "value": "2026-04-08T17:13:38.027Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2023-3452", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:14:06.147Z", "date_only": false, "value": "2026-06-17T06:14:06.147", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-3452", "record": "FKIE_CVE-2023-3452", "field": "lastModified"}]}