{"metadata": {"vulnerability": "CVE-2024-12365", "count": 37, "kinds": {"milestone": 4, "sighting": 23, "kev": 0, "other": 10}}, "data": [{"timestamp": "2024-11-26T00:00:00Z", "date_only": false, "value": "2024-11-26T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / Wordfence", "record": "CVE-2024-12365", "field": "containers.cna.timeline.0.time", "text": "Discovered"}, {"timestamp": "2024-12-09T11:58:01.402Z", "date_only": false, "value": "2024-12-09T11:58:01.402Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-12365", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-13T17:58:37Z", "date_only": false, "value": "2025-01-13T17:58:37.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / Wordfence", "record": "CVE-2024-12365", "field": "containers.cna.timeline.1.time", "text": "Disclosed"}, {"timestamp": "2025-01-14T07:05:40.307Z", "date_only": false, "value": "2025-01-14T07:05:40.307Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-12365", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-01-14T07:10:21.191Z", "date_only": false, "value": "2025-01-14T07:10:21.191153Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113825455604962375", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "221da85d-7884-4cf1-bb58-a35c2d6a95db", "url": "https://infosec.exchange/users/cve/statuses/113825455604962375"}, {"timestamp": "2025-01-14T07:15:26Z", "date_only": false, "value": "2025-01-14T07:15:26Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9Q5V-HCVJ-3V9V", "record": "GHSA-9Q5V-HCVJ-3V9V", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-01-14T07:15:26.080Z", "date_only": false, "value": "2025-01-14T07:15:26.080", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12365", "record": "FKIE_CVE-2024-12365", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-14T07:15:52.371Z", "date_only": false, "value": "2025-01-14T07:15:52.371762Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfopefu2gp2n", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "20a18dfb-6829-4b82-bdf4-54dba20c6e98", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfopefu2gp2n"}, {"timestamp": "2025-01-14T07:42:47.898Z", "date_only": false, "value": "2025-01-14T07:42:47.898567Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoqukgdir2h", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "d6f23ea4-bf7e-4223-b0d9-68c56fca2eee", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoqukgdir2h"}, {"timestamp": "2025-01-14T07:42:48.907Z", "date_only": false, "value": "2025-01-14T07:42:48.907353Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoquknkwz2h", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "7afa1095-ecfb-40dd-a228-e6c3d907549e", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoquknkwz2h"}, {"timestamp": "2025-01-14T07:48:27.127Z", "date_only": false, "value": "2025-01-14T07:48:27.127411Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113825605649943834", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "dd97454c-5a03-4893-986c-8f9fb3ae458b", "url": "https://mastodon.social/users/CyberSignaler/statuses/113825605649943834"}, {"timestamp": "2025-01-14T08:08:18Z", "date_only": false, "value": "2025-01-14T08:08:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1463", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "c68d798b-ea3d-49ba-b94f-0b2617d9962f", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12365\n\ud83d\udd39 Description: The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the is_w3tc_admin_page function in all versions up to, and including, 2.8.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to obtain the plugin's nonce value and perform unauthorized actions, resulting in information disclosure, service plan limits consumption as well as making web requests to arbitrary locations originating from the web application that can be used to query information from internal services, including instance metadata on cloud-based applications.\n\ud83d\udccf Published: 2025-01-14T07:05:40.307Z\n\ud83d\udccf Modified: 2025-01-14T07:05:40.307Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/196e629f-7c77-4bcb-8224-305a0108b630?source=cve\n2. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/w3-total-cache.php#L71\n3. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Root_Loader.php#L269\n4. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Generic_Plugin_Admin.php#L55\n5. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Generic_Plugin_Admin.php#L385\n6. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Generic_Plugin_Admin.php#L516\n7. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Util_Admin.php#L822\n8. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/inc/options/common/top_nav_bar.php#L217\n9. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/inc/options/common/footer.php#L49\n10. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Extensions_Plugin_Admin.php#L55\n11. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Extensions_Plugin_Admin.php#L246\n12. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Extension_ImageService_Plugin_Admin.php#L200\n13. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/UsageStatistics_Plugin_Admin.php#L10\n14. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/UsageStatistics_Plugin_Admin.php#L94", "url": "https://t.me/DarkWebInformer_CVEAlerts/1463"}, {"timestamp": "2025-01-14T08:58:24Z", "date_only": false, "value": "2025-01-14T08:58:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/15232", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "c7642edf-1fb2-4a29-90f2-b488363c846b", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12365 - WordPress W3 Total Cache Unauthorized Data Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12365 \nPublished : Jan. 14, 2025, 7:15 a.m. | 38\u00a0minutes ago \nDescription : The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the is_w3tc_admin_page function in all versions up to, and including, 2.8.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to obtain the plugin's nonce value and perform unauthorized actions, resulting in information disclosure, service plan limits consumption as well as making web requests to arbitrary locations originating from the web application that can be used to query information from internal services, including instance metadata on cloud-based applications. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/15232"}, {"timestamp": "2025-01-14T09:30:33Z", "date_only": false, "value": "2025-01-14T09:30:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9Q5V-HCVJ-3V9V", "record": "GHSA-9Q5V-HCVJ-3V9V", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-14T09:30:33Z", "date_only": false, "value": "2025-01-14T09:30:33Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9Q5V-HCVJ-3V9V", "record": "GHSA-9Q5V-HCVJ-3V9V", "field": "modified", "linked_record": true}, {"timestamp": "2025-01-14T14:47:33.631Z", "date_only": false, "value": "2025-01-14T14:47:33.631850Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-12365", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-14T14:47:33.631Z", "date_only": false, "value": "2025-01-14T14:47:33.631850Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12365", "record": "FKIE_CVE-2024-12365", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-01-14T14:47:45.794Z", "date_only": false, "value": "2025-01-14T14:47:45.794Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-12365", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-16T03:04:48.760Z", "date_only": false, "value": "2025-01-16T03:04:48.760796Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lftcbcvgdh2m", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "86148048-80c7-4832-902d-37e9339470ed", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lftcbcvgdh2m"}, {"timestamp": "2025-01-16T08:54:36.610Z", "date_only": false, "value": "2025-01-16T08:54:36.610930Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lftvss2kp22q", "record": "cve-2024-12365", "field": "creation_timestamp", "uuid": "72fff6b8-4a0d-408e-9bbc-e6a84aed0083", "url": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lftvss2kp22q"}, {"timestamp": "2025-01-16T21:07:28.053Z", "date_only": false, "value": "2025-01-16T21:07:28.053727Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lfv6rb3wys2y", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "40029511-7877-49b4-9ae2-df69480df092", "url": "https://bsky.app/profile/hackingne.ws/post/3lfv6rb3wys2y"}, {"timestamp": "2025-01-17T14:38:58.391Z", "date_only": false, "value": "2025-01-17T14:38:58.391047Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113844206824737894", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "21cf58da-2959-447b-9dd0-3d7c7bf7a321", "url": "https://infosec.exchange/users/jbhall56/statuses/113844206824737894"}, {"timestamp": "2025-01-17T14:39:11.400Z", "date_only": false, "value": "2025-01-17T14:39:11.400998Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lfwzjtt6p22y", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "294dfa66-b307-4ee5-aab5-dde0ee6f6548", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3lfwzjtt6p22y"}, {"timestamp": "2025-01-17T22:30:13.656Z", "date_only": false, "value": "2025-01-17T22:30:13.656722Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lfxtu4ytkx2y", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "16d397c8-e6d8-40d0-9ab1-e983629bec96", "url": "https://bsky.app/profile/bolhasec.com/post/3lfxtu4ytkx2y"}, {"timestamp": "2025-01-18T17:23:41.187Z", "date_only": false, "value": "2025-01-18T17:23:41.187341Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-19fd9414-f6e015e089aff22d", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "7ae0080e-903d-4b96-a6b3-cf474c1d3291", "url": "https://poliverso.org/objects/0477a01e-19fd9414-f6e015e089aff22d"}, {"timestamp": "2025-01-19T09:54:36.969Z", "date_only": false, "value": "2025-01-19T09:54:36.969897Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/elhackernet.extwitter.link/post/3lg3kktvyms26", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "a60290fd-517e-43d1-89c2-a049ead8731f", "url": "https://bsky.app/profile/elhackernet.extwitter.link/post/3lg3kktvyms26"}, {"timestamp": "2025-01-20T02:33:04.666Z", "date_only": false, "value": "2025-01-20T02:33:04.666934Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lg5ceaqux22b", "record": "cve-2024-12365", "field": "creation_timestamp", "uuid": "9b3b4c6b-c9ff-46bb-bb26-7536363c939b", "url": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lg5ceaqux22b"}, {"timestamp": "2025-01-20T16:47:07.042Z", "date_only": false, "value": "2025-01-20T16:47:07.042848Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/113861697335696342", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "5eb043b2-d82f-43fe-af8b-de5e07e08217", "url": "https://mstdn.ca/users/rfwaveio/statuses/113861697335696342"}, {"timestamp": "2026-04-08T16:37:51.371Z", "date_only": false, "value": "2026-04-08T16:37:51.371Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-12365", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T16:37:51.371Z", "date_only": false, "value": "2026-04-08T16:37:51.371Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2024-12365", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:59:34.943Z", "date_only": false, "value": "2026-06-17T06:59:34.943", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12365", "record": "FKIE_CVE-2024-12365", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-09T03:00:10.239Z", "date_only": false, "value": "2026-07-09T03:00:10.239164Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1306", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "d17cacc6-1e50-4c99-9585-c2e5713f717c", "url": "https://t.me/brutsecurity/1306"}, {"timestamp": "2026-07-10T00:00:33.925Z", "date_only": false, "value": "2026-07-10T00:00:33.925323Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1306", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "d838a0b7-c574-42bd-89aa-c9f2ae576429", "url": "https://t.me/brutsecurity/1306"}, {"timestamp": "2026-07-11T15:00:04.860Z", "date_only": false, "value": "2026-07-11T15:00:04.860452Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1306", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "e23a442a-94ee-452b-848f-e47cb0b67571", "url": "https://t.me/brutsecurity/1306", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-12T00:00:46.958Z", "date_only": false, "value": "2026-07-12T00:00:46.958525Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1306", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "8c004887-e448-46f6-8bdd-f1888f0f3c27", "url": "https://t.me/brutsecurity/1306", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-04T13:00:15.422Z", "date_only": false, "value": "2026-08-04T13:00:15.422744Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/175", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "35c1a8cd-045a-4d73-a9d6-8daa7650ca51", "url": "https://t.me/purp_sec/175"}, {"timestamp": "2026-08-05T00:00:07.121Z", "date_only": false, "value": "2026-08-05T00:00:07.121438Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/175", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "08d53396-7114-48e9-bddb-d0377c939728", "url": "https://t.me/purp_sec/175"}], "metrics": {"as_of": "2026-11-10T08:02:41.098Z", "anchors": {"origin": {"timestamp": "2025-01-14T07:05:40.307Z", "date_only": false, "value": "2025-01-14T07:05:40.307Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-12365", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-01-14T07:05:40.307Z", "date_only": false, "value": "2025-01-14T07:05:40.307Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-12365", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-07-11T15:00:04.860Z", "date_only": false, "value": "2026-07-11T15:00:04.860452Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1306", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "e23a442a-94ee-452b-848f-e47cb0b67571", "url": "https://t.me/brutsecurity/1306", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 46943664.553, "hours": 13039.906820277778, "days": 543.3294508449075, "min_seconds": 46943664.553, "max_seconds": 46943664.553, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-14T07:05:40.307Z", "date_only": false, "value": "2025-01-14T07:05:40.307Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-12365", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-11T15:00:04.860Z", "date_only": false, "value": "2026-07-11T15:00:04.860452Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1306", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "e23a442a-94ee-452b-848f-e47cb0b67571", "url": "https://t.me/brutsecurity/1306", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 57459420.79134, "hours": 15960.950219816667, "days": 665.0395924923611, "min_seconds": 57459420.79134, "max_seconds": 57459420.79134, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-14T07:05:40.307Z", "date_only": false, "value": "2025-01-14T07:05:40.307Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-12365", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-10T08:02:41.098Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 10515756.23834, "hours": 2921.043399538889, "days": 121.7101416474537, "min_seconds": 10515756.23834, "max_seconds": 10515756.23834, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-11T15:00:04.860Z", "date_only": false, "value": "2026-07-11T15:00:04.860452Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1306", "record": "CVE-2024-12365", "field": "creation_timestamp", "uuid": "e23a442a-94ee-452b-848f-e47cb0b67571", "url": "https://t.me/brutsecurity/1306", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-10T08:02:41.098Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}