{"metadata": {"vulnerability": "CVE-2023-37979", "count": 41, "kinds": {"milestone": 4, "sighting": 25, "kev": 0, "other": 12}}, "data": [{"timestamp": "2023-07-11T11:35:05.915Z", "date_only": false, "value": "2023-07-11T11:35:05.915Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-37979", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-07-27T14:08:06.204Z", "date_only": false, "value": "2023-07-27T14:08:06.204Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-37979", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-07-27T15:15:00Z", "date_only": false, "value": "2023-07-27T15:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-37979", "record": "GSD-2023-37979", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-07-27T15:15:11Z", "date_only": false, "value": "2023-07-27T15:15:11Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HV7M-P8CR-7667", "record": "GHSA-HV7M-P8CR-7667", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-07-27T15:15:11.507Z", "date_only": false, "value": "2023-07-27T15:15:11.507", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-37979", "record": "FKIE_CVE-2023-37979", "field": "published"}, {"timestamp": "2023-07-27T15:30:36Z", "date_only": false, "value": "2023-07-27T15:30:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HV7M-P8CR-7667", "record": "GHSA-HV7M-P8CR-7667", "field": "published"}, {"timestamp": "2023-07-27T18:28:50Z", "date_only": false, "value": "2023-07-27T18:28:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/67325", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "bfa68f84-7226-4b4f-a3b6-0a657dc9f3d1", "content": "\u203c CVE-2023-37979 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Saturday Drive Ninja Forms Contact Form plugin <=\u00c2\u00a03.6.25 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/67325"}, {"timestamp": "2023-07-31T09:13:42Z", "date_only": false, "value": "2023-07-31T09:13:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/3671", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "6fa8c54d-e18f-4586-8d99-ed0e770916dc", "content": "\ud83d\udd13 Urgent: Protect your WordPress site now! Critical security update required for Ninja Forms plugin. Over 800,000 sites at risk from vulnerabilities CVE-2023-37979, CVE-2023-38386, and CVE-2023-38393. \n \nGet the full scoop here: https://thehackernews.com/2023/07/multiple-flaws-found-in-ninja-forms.html", "url": "https://t.me/thehackernews/3671"}, {"timestamp": "2023-07-31T10:36:25Z", "date_only": false, "value": "2023-07-31T10:36:25.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/TVzNbCj39jddHJ0wyo_RxjoN5ENQMo13tFhhm0Se71_sQw", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "85ee3821-4470-4f04-965c-1b9351680e63"}, {"timestamp": "2023-07-31T10:49:30Z", "date_only": false, "value": "2023-07-31T10:49:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KomunitiSiber/572", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "c4a1195a-0e52-4c3b-9f65-a39004dfb75a", "content": "Multiple Flaws Found in Ninja Forms Plugin Leave 800,000 Sites Vulnerable\nhttps://thehackernews.com/2023/07/multiple-flaws-found-in-ninja-forms.html\n\nMultiple security vulnerabilities have been disclosed in the Ninja Forms plugin for WordPress that could be exploited by threat actors to escalate privileges and steal sensitive data.\nThe flaws, tracked as CVE-2023-37979, CVE-2023-38386, and CVE-2023-38393, impact versions 3.6.25 and below, Patchstack\u00a0said\u00a0in a report last week. Ninja Forms is installed on over 800,000 sites.\nA brief description", "url": "https://t.me/KomunitiSiber/572"}, {"timestamp": "2023-08-02T13:18:29Z", "date_only": false, "value": "2023-08-02T13:18:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8780", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "c66b32ff-c495-4f6e-9144-fe3ca3715f2e", "content": "#exploit\n1. CVE-2023-37979:\nXSS in Ninja Forms wordpress plugin\nhttps://github.com/Fire-Null/CVE-2023-37979\n]-> https://github.com/Mehran-Seifalinia/CVE-2023-37979\n\n2. CVE-2023-39147:\nUvdesk v1.1.3 - File Upload RCE (Authenticated)\nhttps://www.exploit-db.com/exploits/51639", "url": "https://t.me/CyberSecurityTechnologies/8780"}, {"timestamp": "2023-08-03T05:03:56Z", "date_only": false, "value": "2023-08-03T05:03:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/807", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "9353160b-9db5-4997-8b08-058857c67edd", "content": "https://github.com/Fire-Null/CVE-2023-37979\ncve-2023-37979  poc\n#github", "url": "https://t.me/CNArsenal/807"}, {"timestamp": "2023-08-03T12:32:17Z", "date_only": false, "value": "2023-08-03T12:32:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/3987", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "c2d692bf-03bc-4b59-8fcc-a60f32428a81", "content": "\ud83d\udccc\ud83d\udcdfCVE-2023-37979 Ninja-Forms Exploit : https://system32.ink/cve-2023-37979-ninja-forms-exploit/\n\n\ud83e\uddeeLFI FINDER TOOL : https://system32.ink/lfi-finder-tool/\n\n\ud83d\udccd\ud83e\ude85Gamigo Data Leak : https://system32.ink/gamigo-data-leak/\n\n@Crackcodes | System32.ink | Crackcodes.in", "url": "https://t.me/crackcodes/3987"}, {"timestamp": "2023-08-03T12:33:08Z", "date_only": false, "value": "2023-08-03T12:33:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FPjteHPPefkZ-BBiKfxliVBknEhs1Yye2XNt5djwPX5QNQ", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "f9d2b134-234b-42e0-9c8b-5e156e0cd337"}, {"timestamp": "2023-08-04T10:40:04Z", "date_only": false, "value": "2023-08-04T10:40:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4864", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "f0a8c033-70db-48ca-a4d5-596c366d9abf", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-37979 PoC and Checker\nURL\uff1ahttps://github.com/d0rb/CVE-2023-37979\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4864"}, {"timestamp": "2023-08-04T13:37:23Z", "date_only": false, "value": "2023-08-04T13:37:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/812", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "4ad34778-2024-4364-8f5e-80d1313db539", "content": "https://github.com/d0rb/CVE-2023-37979\npoc\n#github", "url": "https://t.me/CNArsenal/812"}, {"timestamp": "2023-08-04T18:15:00Z", "date_only": false, "value": "2023-08-04T18:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-37979", "record": "GSD-2023-37979", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-08-14T01:40:46Z", "date_only": false, "value": "2023-08-14T01:40:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3153", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "4160b461-1ed7-41a1-9d12-03d5b8ed4cee", "content": "Hackers Factory \n\nBlack Hat USA 2023\nDefender-Pretender: When Windows Defender Updates Become a Security Risk\n\nhttps://github.com/SafeBreach-Labs/wd-pretender\n\n#BlackHat #blackhat23 #Infosec #Windows #Security #cyberattacks\n\nRCE exploit for CVE-2023-3519\n\nhttps://github.com/BishopFox/CVE-2023-3519\n\nCVE-2023-37979\n\nhttps://github.com/Fire-Null/CVE-2023-37979\n\nGolang client for querying SecurityTrails API data\n\nhttps://github.com/hakluke/haktrails\n\nExtract URLs, paths, secrets, and other interesting bits from JavaScript\n\nhttps://github.com/BishopFox/jsluice\n\nCVE-2023-35078 Remote Unauthenticated API Access Vulnerability Exploit POC\n\nhttps://github.com/vchan-in/CVE-2023-35078-Exploit-POC\n\nSub-Domain TakeOver Vulnerability Scanner\n\nhttps://github.com/m4ll0k/takeover\n\nCloudpanel 0-day Exploit\n\nhttps://github.com/datackmy/FallingSkies-CVE-2023-35885\n\nnse script to identify server vulnerable to CVE-2023-3519\n\nhttps://github.com/dorkerdevil/CitrixFall\n\nCVE-2023-34960 Chamilo PoC\n\nhttps://github.com/Aituglo/CVE-2023-34960/blob/master/poc.py\n\nVMWare vRealize Network Insight pre-authenticated RCE CVE-2023-20887\n\nhttps://github.com/projectdiscovery/nuclei-templates/pull/7405\n\nKeyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.\n\nhttps://github.com/streaak/keyhacks\n\n#Infosec #cybersec #hackersfactory \n\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/3153"}, {"timestamp": "2023-08-17T02:29:50Z", "date_only": false, "value": "2023-08-17T02:29:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4935", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "6dc7632e-8922-4d8a-8834-8d05ef4c946a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-37979 - WordPress Authenticated XSS in Ninja-forms Plugin\nURL\uff1ahttps://github.com/codeb0ss/CVE-2023-37979\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4935"}, {"timestamp": "2023-12-13T01:20:24.796Z", "date_only": false, "value": "2023-12-13T01:20:24.796925Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-37979", "record": "GSD-2023-37979", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-04T06:24:19Z", "date_only": false, "value": "2024-04-04T06:24:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HV7M-P8CR-7667", "record": "GHSA-HV7M-P8CR-7667", "field": "modified"}, {"timestamp": "2024-08-02T17:23:27.814Z", "date_only": false, "value": "2024-08-02T17:23:27.814Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-37979", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-17T21:31:17Z", "date_only": false, "value": "2024-09-17T21:31:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1036", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "ef13a8cb-3d20-47b0-8627-3831dac9c9f5", "content": "CVE-2023-37979 - WordPress Authenticated XSS in Ninja-forms Plugin + Upload File", "url": "https://t.me/codeb0ss/1036"}, {"timestamp": "2024-09-25T16:35:01.572Z", "date_only": false, "value": "2024-09-25T16:35:01.572319Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-37979", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-09-25T16:35:01.572Z", "date_only": false, "value": "2024-09-25T16:35:01.572319Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-37979", "record": "FKIE_CVE-2023-37979", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-09-25T16:57:52.075Z", "date_only": false, "value": "2024-09-25T16:57:52.075Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-37979", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-28T16:08:33.041Z", "date_only": false, "value": "2026-04-28T16:08:33.041Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-37979", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-28T16:08:33.041Z", "date_only": false, "value": "2026-04-28T16:08:33.041Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Patchstack", "record": "CVE-2023-37979", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:09:03.373Z", "date_only": false, "value": "2026-06-17T06:09:03.373", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-37979", "record": "FKIE_CVE-2023-37979", "field": "lastModified"}, {"timestamp": "2026-07-29T12:00:06.412Z", "date_only": false, "value": "2026-07-29T12:00:06.412241Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/19222", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "d36b23e0-946f-4dbc-989c-f58fc427f04d", "url": "https://t.me/CVEhub/19222"}, {"timestamp": "2026-07-29T12:00:09.690Z", "date_only": false, "value": "2026-07-29T12:00:09.690124Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/18423", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "be756d26-68a8-436a-b137-45fce7bc57ac", "url": "https://t.me/CVEhub/18423"}, {"timestamp": "2026-07-29T12:00:10.489Z", "date_only": false, "value": "2026-07-29T12:00:10.489336Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/18216", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "20c4518a-cf7b-4918-b174-753b5a66a81b", "url": "https://t.me/CVEhub/18216"}, {"timestamp": "2026-07-29T12:00:10.587Z", "date_only": false, "value": "2026-07-29T12:00:10.587387Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/18204", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "88718261-5530-4200-a385-b54a772b2212", "url": "https://t.me/CVEhub/18204"}, {"timestamp": "2026-07-29T12:00:10.649Z", "date_only": false, "value": "2026-07-29T12:00:10.649317Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/18210", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "947e4110-d1e8-4cc0-8c9d-e6591dcf030f", "url": "https://t.me/CVEhub/18210"}, {"timestamp": "2026-07-30T00:00:09.248Z", "date_only": false, "value": "2026-07-30T00:00:09.248464Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/18210", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "c2b652c1-393b-466a-91c6-befbb52a7c83", "url": "https://t.me/CVEhub/18210"}, {"timestamp": "2026-07-30T00:00:09.346Z", "date_only": false, "value": "2026-07-30T00:00:09.346499Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/18204", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "af5f4332-6c0f-4d84-b114-96ad65e87fda", "url": "https://t.me/CVEhub/18204"}, {"timestamp": "2026-07-30T00:00:09.488Z", "date_only": false, "value": "2026-07-30T00:00:09.488214Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/18216", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "0e907f34-a011-4d0d-a9c5-68eaa3ab4763", "url": "https://t.me/CVEhub/18216"}, {"timestamp": "2026-07-30T00:00:22.868Z", "date_only": false, "value": "2026-07-30T00:00:22.868162Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/18423", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "1dc8f3b6-1641-4bb7-a8a0-bef5065deaa5", "url": "https://t.me/CVEhub/18423"}, {"timestamp": "2026-07-30T00:00:25.408Z", "date_only": false, "value": "2026-07-30T00:00:25.408478Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/19222", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "f2a4bebb-010e-4952-8887-e0acefbc6012", "url": "https://t.me/CVEhub/19222"}, {"timestamp": "2026-09-01T17:00:07.828Z", "date_only": false, "value": "2026-09-01T17:00:07.828014Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/808", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "b733feef-6c35-4445-8b83-74b3c39c89a1", "url": "https://t.me/Hackme_news/808"}, {"timestamp": "2026-09-01T17:00:17.933Z", "date_only": false, "value": "2026-09-01T17:00:17.933322Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7064", "record": "CVE-2023-37979", "field": "creation_timestamp", "uuid": "0a6ad822-a161-4182-9968-c979c5ce6d2b", "url": "https://t.me/cissp/7064"}]}