{"metadata": {"vulnerability": "CVE-2024-12209", "count": 37, "kinds": {"milestone": 4, "sighting": 16, "kev": 6, "other": 11}}, "data": [{"timestamp": "2024-12-04T17:49:33.048Z", "date_only": false, "value": "2024-12-04T17:49:33.048Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-12209", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-12-07T16:24:56Z", "date_only": false, "value": "2024-12-07T16:24:56.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2024-12209", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2024-12-08T05:25:16.114Z", "date_only": false, "value": "2024-12-08T05:25:16.114Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-12209", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-12-08T05:33:48.010Z", "date_only": false, "value": "2024-12-08T05:33:48.010759Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113615570697901377", "record": "CVE-2024-12209", "field": "creation_timestamp", "uuid": "9bc794fc-55d2-4860-8568-3fdf68bf7d00", "url": "https://infosec.exchange/users/cve/statuses/113615570697901377"}, {"timestamp": "2024-12-08T06:15:04Z", "date_only": false, "value": "2024-12-08T06:15:04Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PP69-Q6MG-R2C8", "record": "GHSA-PP69-Q6MG-R2C8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-12-08T06:15:04.823Z", "date_only": false, "value": "2024-12-08T06:15:04.823", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12209", "record": "FKIE_CVE-2024-12209", "field": "published"}, {"timestamp": "2024-12-08T06:30:43Z", "date_only": false, "value": "2024-12-08T06:30:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PP69-Q6MG-R2C8", "record": "GHSA-PP69-Q6MG-R2C8", "field": "published"}, {"timestamp": "2024-12-08T06:30:43Z", "date_only": false, "value": "2024-12-08T06:30:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PP69-Q6MG-R2C8", "record": "GHSA-PP69-Q6MG-R2C8", "field": "modified"}, {"timestamp": "2024-12-08T07:45:18Z", "date_only": false, "value": "2024-12-08T07:45:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/12330", "record": "CVE-2024-12209", "field": "creation_timestamp", "uuid": "02356267-33d0-4e92-a38f-a380605eb562", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12209 - \"WP Umbrella: Remote File Execution via arbitrary file inclusion\"\", \n  \"Content\": \"CVE ID : CVE-2024-12209 \nPublished : Dec. 8, 2024, 6:15 a.m. | 22\u00a0minutes ago \nDescription : The WP Umbrella: Update Backup Restore & Monitoring plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.17.0 via the 'filename' parameter of the 'umbrella-restore' action. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/12330"}, {"timestamp": "2024-12-08T11:24:46Z", "date_only": false, "value": "2024-12-08T11:24:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/26733", "record": "CVE-2024-12209", "field": "creation_timestamp", "uuid": "4119efcb-700f-41e0-86a7-b57e0a8d01f0", "content": "\u26a1\ufe0fCVE-2024-12209 (CVSS 9.8): WP Umbrella Plugin Vulnerability Exposes 30,000 Websites to Compromise.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/26733"}, {"timestamp": "2024-12-08T11:24:47Z", "date_only": false, "value": "2024-12-08T11:24:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/1711", "record": "CVE-2024-12209", "field": "creation_timestamp", "uuid": "40000e2b-e067-4420-9e7f-dd2bfbe89718", "content": "\u26a1\ufe0fCVE-2024-12209 (CVSS 9.8): WP Umbrella Plugin Vulnerability Exposes 30,000 Websites to Compromise.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/1711"}, {"timestamp": "2024-12-08T16:43:02.635Z", "date_only": false, "value": "2024-12-08T16:43:02.635448Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/113618202280680817", "record": "CVE-2024-12209", "field": "creation_timestamp", "uuid": "0050df2e-69b6-4a9a-90f5-07c5771288fe", "url": "https://infosec.exchange/users/vuldb/statuses/113618202280680817"}, {"timestamp": "2024-12-09T15:52:48.278Z", "date_only": false, "value": "2024-12-09T15:52:48.278363Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-12209", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-12-09T15:52:48.278Z", "date_only": false, "value": "2024-12-09T15:52:48.278363Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12209", "record": "FKIE_CVE-2024-12209", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-12-09T15:54:53.710Z", "date_only": false, "value": "2024-12-09T15:54:53.710Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-12209", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-09T19:05:38Z", "date_only": false, "value": "2024-12-09T19:05:38.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12209.yaml", "record": "CVE-2024-12209", "field": "creation_timestamp", "uuid": "531ec4bb-7377-4ca6-aebd-fa77ee012cd8", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12209.yaml"}, {"timestamp": "2024-12-11T00:00:00Z", "date_only": true, "value": "2024-12-11", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-47708", "record": "CNVD-2024-47708", "field": "submitTime"}, {"timestamp": "2024-12-12T00:00:00Z", "date_only": true, "value": "2024-12-12", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-47708", "record": "CNVD-2024-47708", "field": "openTime"}, {"timestamp": "2024-12-24T11:45:43Z", "date_only": false, "value": "2024-12-24T11:45:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ckeArsenal/245", "record": "CVE-2024-12209", "field": "creation_timestamp", "uuid": "28c122cb-b9c5-47da-8d06-7f7af86c1340", "content": "https://github.com/Nxploited/CVE-2024-12209\n\nUnauthenticated Local File Inclusion\n#github #exploit", "url": "https://t.me/ckeArsenal/245"}, {"timestamp": "2024-12-24T12:49:11Z", "date_only": false, "value": "2024-12-24T12:49:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/768", "record": "CVE-2024-12209", "field": "creation_timestamp", "uuid": "b7a76eb7-ed86-4782-8eca-340609cd0470", "content": "#exploit\n1. A Practical Guide to PrintNightmare in 2024 (updated\u00a0Oct 5)\nhttps://itm4n.github.io/printnightmare-exploitation\n]-> PnP bypass\n\n2. CVE-2024-12209:\nWP Umbrella Unauthenticated LFI\nhttps://github.com/Nxploited/CVE-2024-12209\n\n3. CVE-2024-30085:\nWindows 11 23H2 EoP\nhttps://ssd-disclosure.com/ssd-advisory-cldflt-heap-based-overflow-pe", "url": "https://t.me/HackerArsenal/768"}, {"timestamp": "2024-12-24T17:57:48Z", "date_only": false, "value": "2024-12-24T17:57:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11600", "record": "CVE-2024-12209", "field": "creation_timestamp", "uuid": "3ec1cae5-0da1-47c0-8a45-d7b6f09abdd0", "content": "#exploit\n1. A Practical Guide to PrintNightmare in 2024 (updated\u00a0Oct 5)\nhttps://itm4n.github.io/printnightmare-exploitation\n]-> PnP bypass\n\n2. CVE-2024-12209:\nWP Umbrella Unauthenticated LFI\nhttps://github.com/Nxploited/CVE-2024-12209\n\n3. CVE-2024-30085:\nWindows 11 23H2 EoP\nhttps://ssd-disclosure.com/ssd-advisory-cldflt-heap-based-overflow-pe", "url": "https://t.me/CyberSecurityTechnologies/11600"}, {"timestamp": "2025-01-06T20:20:09.785Z", "date_only": false, "value": "2025-01-06T20:20:09.785213Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783263021420100", "record": "CVE-2024-12209", "field": "creation_timestamp", "uuid": "2bef896a-dd2d-4bea-a60d-5204f7e0f63b", "url": "https://infosec.exchange/users/random_robbie/statuses/113783263021420100"}, {"timestamp": "2025-01-27T07:07:44Z", "date_only": false, "value": "2025-01-27T07:07:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/suboxone_chatroom/1577", "record": "CVE-2024-12209", "field": "creation_timestamp", "uuid": "2e1645b3-7d5d-4256-9733-14ab88eb0f8d", "content": "#exploit\n1. A Practical Guide to PrintNightmare in 2024 (updated\u00a0Oct 5)\nhttps://itm4n.github.io/printnightmare-exploitation\n]-> PnP bypass\n\n2. CVE-2024-12209:\nWP Umbrella Unauthenticated LFI\nhttps://github.com/Nxploited/CVE-2024-12209\n\n3. CVE-2024-30085:\nWindows 11 23H2 EoP\nhttps://ssd-disclosure.com/ssd-advisory-cldflt-heap-based-overflow-pe", "url": "https://t.me/suboxone_chatroom/1577"}, {"timestamp": "2025-02-19T21:02:37.895Z", "date_only": false, "value": "2025-02-19T21:02:37.895931Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodqzbx425", "record": "CVE-2024-12209", "field": "creation_timestamp", "uuid": "b325de5c-ccd4-4217-b59a-85f4c4f13e6a", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodqzbx425"}, {"timestamp": "2025-03-17T00:00:00Z", "date_only": false, "value": "2025-03-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-17)", "record": "CVE-2024-12209", "field": "creation_timestamp", "uuid": "064887bd-e4df-4959-95bb-d34457c2f54a"}, {"timestamp": "2025-03-17T00:00:00Z", "date_only": true, "value": "2025-03-17", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2024-12209", "field": "evidence.0.details.observation_date", "uuid": "b8fcbffd-8232-4280-ac08-910ec24321f3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-17T01:09:40Z", "date_only": false, "value": "2025-03-17T01:09:40+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2024-12209", "field": "timestamps.asserted_at", "uuid": "b8fcbffd-8232-4280-ac08-910ec24321f3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-17T01:09:40Z", "date_only": false, "value": "2025-03-17T01:09:40+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-12209", "field": "timestamps.first_seen_at", "uuid": "b8fcbffd-8232-4280-ac08-910ec24321f3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-17T01:09:40Z", "date_only": false, "value": "2025-03-17T01:09:40+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2024-12209", "field": "timestamps.last_seen_at", "uuid": "b8fcbffd-8232-4280-ac08-910ec24321f3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-17T01:09:40Z", "date_only": false, "value": "2025-03-17T01:09:40+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2024-12209", "field": "status.status_updated_at", "uuid": "b8fcbffd-8232-4280-ac08-910ec24321f3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-08T17:21:23.448Z", "date_only": false, "value": "2026-04-08T17:21:23.448Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-12209", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T17:21:23.448Z", "date_only": false, "value": "2026-04-08T17:21:23.448Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2024-12209", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:59:15.140Z", "date_only": false, "value": "2026-06-17T06:59:15.140", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12209", "record": "FKIE_CVE-2024-12209", "field": "lastModified"}, {"timestamp": "2026-06-23T14:06:09.139Z", "date_only": false, "value": "2026-06-23T14:06:09.139191Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f95d5f58-01e6-4068-8315-1e5bc32a0fd2", "record": "CVE-2024-12209", "field": "creation_timestamp", "uuid": "7068b206-beb9-463f-ae8f-4d38c3b95eca", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f95d5f58-01e6-4068-8315-1e5bc32a0fd2"}, {"timestamp": "2026-06-30T11:54:41.680Z", "date_only": false, "value": "2026-06-30T11:54:41.680893Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5757d14e-556b-4263-bd50-84cc2929bc7f", "record": "CVE-2024-12209", "field": "creation_timestamp", "uuid": "22a93a00-c148-491e-aa95-ef55516107aa", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5757d14e-556b-4263-bd50-84cc2929bc7f"}, {"timestamp": "2026-07-01T07:17:57.791Z", "date_only": false, "value": "2026-07-01T07:17:57.791585Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/b8fcbffd-8232-4280-ac08-910ec24321f3", "record": "CVE-2024-12209", "field": "creation_timestamp", "uuid": "680f8997-49de-4ada-9d01-1c81c49ab395", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/b8fcbffd-8232-4280-ac08-910ec24321f3"}, {"timestamp": "2026-07-01T10:50:51Z", "date_only": false, "value": "2026-07-01T10:50:51+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2024-12209", "field": "timestamps.recorded_at", "uuid": "b8fcbffd-8232-4280-ac08-910ec24321f3", "status": {"status_reason": "confirmed", "exploited": true}}]}