{"metadata": {"vulnerability": "CVE-2024-11423", "count": 22, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-11-19T15:07:15.819Z", "date_only": false, "value": "2024-11-19T15:07:15.819Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-11423", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-07T21:46:18Z", "date_only": false, "value": "2025-01-07T21:46:18.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2024-11423", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-01-08T11:09:24.799Z", "date_only": false, "value": "2025-01-08T11:09:24.799Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-11423", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-08T11:13:00.539Z", "date_only": false, "value": "2025-01-08T11:13:00.539126Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113792436139547295", "record": "CVE-2024-11423", "field": "creation_timestamp", "uuid": "68ad7cea-a57c-47b0-835b-c7e06e0e1430", "url": "https://infosec.exchange/users/cve/statuses/113792436139547295"}, {"timestamp": "2025-01-08T11:15:06Z", "date_only": false, "value": "2025-01-08T11:15:06Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-27HG-CW87-7CHH", "record": "GHSA-27HG-CW87-7CHH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-01-08T11:15:06.003Z", "date_only": false, "value": "2025-01-08T11:15:06.003", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-11423", "record": "FKIE_CVE-2024-11423", "field": "published"}, {"timestamp": "2025-01-08T11:15:40.320Z", "date_only": false, "value": "2025-01-08T11:15:40.320463Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7zxnzlxm2d", "record": "CVE-2024-11423", "field": "creation_timestamp", "uuid": "dcf3a25c-080a-4c84-b0ce-c6252640f58f", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7zxnzlxm2d"}, {"timestamp": "2025-01-08T11:53:49.462Z", "date_only": false, "value": "2025-01-08T11:53:49.462227Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfa43v4rfo2w", "record": "CVE-2024-11423", "field": "creation_timestamp", "uuid": "537de30b-55fe-4734-ba7a-536e7b191596", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfa43v4rfo2w"}, {"timestamp": "2025-01-08T12:12:51Z", "date_only": false, "value": "2025-01-08T12:12:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/693", "record": "CVE-2024-11423", "field": "creation_timestamp", "uuid": "834d8d65-8fec-4fc4-a6eb-77138b90c018", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-11423\n\ud83d\udd39 Description: The Ultimate Gift Cards for WooCommerce \u2013 Create WooCommerce Gift Cards, Gift Vouchers, Redeem & Manage Digital Gift Coupons. Offer Gift Certificates, Schedule Gift Cards, and Use Advance Coupons With Personalized Templates plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several REST API endpoints such as /wp-json/gifting/recharge-giftcard in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to recharge a gift card balance, without making a payment along with reducing gift card balances without purchasing anything.\n\ud83d\udccf Published: 2025-01-08T11:09:24.799Z\n\ud83d\udccf Modified: 2025-01-08T11:09:24.799Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/836884b5-f547-4f50-8a97-5d910d877e5e?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3212554/woo-gift-cards-lite/trunk/includes/giftcard-redeem-api-addon.php\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3208474%40woo-gift-cards-lite&new=3208474%40woo-gift-cards-lite&sfp_email=&sfph_mail=", "url": "https://t.me/DarkWebInformer_CVEAlerts/693"}, {"timestamp": "2025-01-08T12:30:42Z", "date_only": false, "value": "2025-01-08T12:30:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-27HG-CW87-7CHH", "record": "GHSA-27HG-CW87-7CHH", "field": "published"}, {"timestamp": "2025-01-08T12:30:42Z", "date_only": false, "value": "2025-01-08T12:30:42Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-27HG-CW87-7CHH", "record": "GHSA-27HG-CW87-7CHH", "field": "modified"}, {"timestamp": "2025-01-08T13:18:10Z", "date_only": false, "value": "2025-01-08T13:18:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/14683", "record": "CVE-2024-11423", "field": "creation_timestamp", "uuid": "f37b57d3-83f0-448f-912e-b395133296f2", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-11423 - WooCommerce Gift Cards Advanced Coupons Unauthorized Data Modification\", \n  \"Content\": \"CVE ID : CVE-2024-11423 \nPublished : Jan. 8, 2025, 11:15 a.m. | 42\u00a0minutes ago \nDescription : The Ultimate Gift Cards for WooCommerce \u2013 Create WooCommerce Gift Cards, Gift Vouchers, Redeem & Manage Digital Gift Coupons. Offer Gift Certificates, Schedule Gift Cards, and Use Advance Coupons With Personalized Templates plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several REST API endpoints such as /wp-json/gifting/recharge-giftcard in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to recharge a gift card balance, without making a payment along with reducing gift card balances without purchasing anything. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/14683"}, {"timestamp": "2025-01-08T13:54:16.433Z", "date_only": false, "value": "2025-01-08T13:54:16.433843Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-11423", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-08T13:54:16.433Z", "date_only": false, "value": "2025-01-08T13:54:16.433843Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-11423", "record": "FKIE_CVE-2024-11423", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-08T22:00:05Z", "date_only": false, "value": "2025-01-08T22:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7Mqw0CZUm1qIPt1F_gelWOs8kZmfdBYU-HTVnqqvQJce11k", "record": "CVE-2024-11423", "field": "creation_timestamp", "uuid": "36931aaa-94c0-4986-b53c-1d16d358576f"}, {"timestamp": "2025-01-09T03:34:23.579Z", "date_only": false, "value": "2025-01-09T03:34:23.579439Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfbqnrjwik2y", "record": "CVE-2024-11423", "field": "creation_timestamp", "uuid": "81dac053-4db4-4c05-9aee-e6d5563d386b", "url": "https://bsky.app/profile/gothburz.bsky.social/post/3lfbqnrjwik2y"}, {"timestamp": "2025-01-14T12:58:47.468Z", "date_only": false, "value": "2025-01-14T12:58:47.468810Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113826825965303615", "record": "CVE-2024-11423", "field": "creation_timestamp", "uuid": "081ea9b3-5b63-4625-a868-b97c89b8f5a9", "url": "https://infosec.exchange/users/random_robbie/statuses/113826825965303615"}, {"timestamp": "2025-01-20T21:02:02.590Z", "date_only": false, "value": "2025-01-20T21:02:02.590203Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad5jyvy2a", "record": "CVE-2024-11423", "field": "creation_timestamp", "uuid": "76066fd3-db16-42c4-a05d-8d2645e2d3b1", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad5jyvy2a"}, {"timestamp": "2026-04-08T17:04:07.676Z", "date_only": false, "value": "2026-04-08T17:04:07.676Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2024-11423", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-20T14:29:06.077Z", "date_only": false, "value": "2026-05-20T14:29:06.077Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-11423", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-20T14:29:06.077Z", "date_only": false, "value": "2026-05-20T14:29:06.077Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-11423", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:57:43.890Z", "date_only": false, "value": "2026-06-17T06:57:43.890", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-11423", "record": "FKIE_CVE-2024-11423", "field": "lastModified"}]}