{"metadata": {"vulnerability": "CVE-2024-13771", "count": 19, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-01-28T16:45:03.935Z", "date_only": false, "value": "2025-01-28T16:45:03.935Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-13771", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / Wordfence", "record": "CVE-2024-13771", "field": "containers.cna.timeline.0.time", "text": "Disclosed"}, {"timestamp": "2025-03-14T11:15:52.455Z", "date_only": false, "value": "2025-03-14T11:15:52.455Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-13771", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-03-14T12:15:13Z", "date_only": false, "value": "2025-03-14T12:15:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-98C3-Q46G-62QH", "record": "GHSA-98C3-Q46G-62QH", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-03-14T12:15:13.693Z", "date_only": false, "value": "2025-03-14T12:15:13.693", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-13771", "record": "FKIE_CVE-2024-13771", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-14T12:32:01Z", "date_only": false, "value": "2025-03-14T12:32:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-98C3-Q46G-62QH", "record": "GHSA-98C3-Q46G-62QH", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-14T12:40:10.579Z", "date_only": false, "value": "2025-03-14T12:40:10.579967Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkdmymtmnl2g", "record": "CVE-2024-13771", "field": "creation_timestamp", "uuid": "9c0e66ae-4911-4d61-af10-26625f7cbdbb", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkdmymtmnl2g"}, {"timestamp": "2025-03-14T12:43:10.649Z", "date_only": false, "value": "2025-03-14T12:43:10.649851Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-13771", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-14T12:43:10.649Z", "date_only": false, "value": "2025-03-14T12:43:10.649851Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-13771", "record": "FKIE_CVE-2024-13771", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-03-14T13:48:23.524Z", "date_only": false, "value": "2025-03-14T13:48:23.524812Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114161097294048919", "record": "CVE-2024-13771", "field": "creation_timestamp", "uuid": "a67846fb-91a4-440e-817a-0b7f42fee125", "url": "https://mastodon.social/users/CyberSignaler/statuses/114161097294048919"}, {"timestamp": "2025-03-14T13:55:59.389Z", "date_only": false, "value": "2025-03-14T13:55:59.389415Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkdra5ylr72l", "record": "CVE-2024-13771", "field": "creation_timestamp", "uuid": "4a75ffd9-1a8c-455e-8dab-b335d8574e21", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkdra5ylr72l"}, {"timestamp": "2025-03-14T15:02:12Z", "date_only": false, "value": "2025-03-14T15:02:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/20289", "record": "CVE-2024-13771", "field": "creation_timestamp", "uuid": "aac9e2c5-7e68-481d-8d9e-3b8f7e6f32f5", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13771 - Civi WordPress Theme Unauthenticated Password Change Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13771 \nPublished : March 14, 2025, 12:15 p.m. | 1\u00a0hour, 11\u00a0minutes ago \nDescription : The Civi - Job Board &amp; Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.1.4. This is due to a lack of user validation before changing a password. This makes it possible for unauthenticated attackers to change the password of arbitrary users, including administrators, if the attacker knows the username of the victim. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/20289"}, {"timestamp": "2025-03-14T23:00:08.652Z", "date_only": false, "value": "2025-03-14T23:00:08.652498Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkepn5xpwi2d", "record": "CVE-2024-13771", "field": "creation_timestamp", "uuid": "69f646d2-d75d-4827-932e-6f503a7bc73c", "url": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkepn5xpwi2d"}, {"timestamp": "2025-03-15T11:00:07.135Z", "date_only": false, "value": "2025-03-15T11:00:07.135903Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkfxumegol23", "record": "CVE-2024-13771", "field": "creation_timestamp", "uuid": "c13c9514-d824-4302-a259-6ff96b354675", "url": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkfxumegol23"}, {"timestamp": "2025-04-03T13:07:20.148Z", "date_only": false, "value": "2025-04-03T13:07:20.148Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-13771", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-08T16:55:12.686Z", "date_only": false, "value": "2026-04-08T16:55:12.686Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-13771", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T16:55:12.686Z", "date_only": false, "value": "2026-04-08T16:55:12.686Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2024-13771", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-08T18:33:51Z", "date_only": false, "value": "2026-04-08T18:33:51Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-98C3-Q46G-62QH", "record": "GHSA-98C3-Q46G-62QH", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-17T07:02:41.443Z", "date_only": false, "value": "2026-06-17T07:02:41.443", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-13771", "record": "FKIE_CVE-2024-13771", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-12T19:54:00.240Z", "anchors": {"origin": {"timestamp": "2025-03-14T11:15:52.455Z", "date_only": false, "value": "2025-03-14T11:15:52.455Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-13771", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-03-14T11:15:52.455Z", "date_only": false, "value": "2025-03-14T11:15:52.455Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-13771", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 52562287.785054, "hours": 14600.635495848333, "days": 608.3598123270139, "min_seconds": 52562287.785054, "max_seconds": 52562287.785054, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-14T11:15:52.455Z", "date_only": false, "value": "2025-03-14T11:15:52.455Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-13771", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-12T19:54:00.240Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}
