{"metadata": {"vulnerability": "CVE-2024-4836", "count": 30, "kinds": {"milestone": 4, "sighting": 16, "kev": 0, "other": 10}}, "data": [{"timestamp": "2024-05-13T10:34:57.036Z", "date_only": false, "value": "2024-05-13T10:34:57.036Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-4836", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-07-02T08:43:00Z", "date_only": false, "value": "2024-07-02T08:43:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / CERT-PL", "record": "CVE-2024-4836", "field": "containers.cna.datePublic"}, {"timestamp": "2024-07-02T08:44:05.732Z", "date_only": false, "value": "2024-07-02T08:44:05.732Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-4836", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-07-02T08:44:05.732Z", "date_only": false, "value": "2024-07-02T08:44:05.732Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CERT-PL", "record": "CVE-2024-4836", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-02T09:15:19Z", "date_only": false, "value": "2024-07-02T09:15:19Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W2W9-635Q-99V6", "record": "GHSA-W2W9-635Q-99V6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-07-02T09:15:19.553Z", "date_only": false, "value": "2024-07-02T09:15:19.553", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4836", "record": "FKIE_CVE-2024-4836", "field": "published"}, {"timestamp": "2024-07-02T09:32:07Z", "date_only": false, "value": "2024-07-02T09:32:07Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W2W9-635Q-99V6", "record": "GHSA-W2W9-635Q-99V6", "field": "published"}, {"timestamp": "2024-07-02T09:32:07Z", "date_only": false, "value": "2024-07-02T09:32:07Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W2W9-635Q-99V6", "record": "GHSA-W2W9-635Q-99V6", "field": "modified"}, {"timestamp": "2024-07-02T17:20:58Z", "date_only": false, "value": "2024-07-02T17:20:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7834", "record": "CVE-2024-4836", "field": "creation_timestamp", "uuid": "7efb6c0c-9f57-4df0-8817-4aada48e12a3", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aexamlpe poc of CVE-2024-4836_Check\nURL\uff1ahttps://github.com/sleep46/CVE-2024-4836_Check\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7834"}, {"timestamp": "2024-07-02T18:15:33.246Z", "date_only": false, "value": "2024-07-02T18:15:33.246242Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-4836", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-07-02T18:15:33.246Z", "date_only": false, "value": "2024-07-02T18:15:33.246242Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4836", "record": "FKIE_CVE-2024-4836", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-07-02T18:18:27.772Z", "date_only": false, "value": "2024-07-02T18:18:27.772Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-4836", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T20:55:09.998Z", "date_only": false, "value": "2024-08-01T20:55:09.998Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-4836", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-01T20:55:09.998Z", "date_only": false, "value": "2024-08-01T20:55:09.998Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-4836", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-30T06:52:02Z", "date_only": false, "value": "2024-08-30T06:52:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1554", "record": "CVE-2024-4836", "field": "creation_timestamp", "uuid": "753eb2dd-7093-4e72-bdf2-8ad6d7048fdf", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1554"}, {"timestamp": "2024-08-31T12:29:12Z", "date_only": false, "value": "2024-08-31T12:29:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XpvaFCWqDdhczMpL78DIu7UwbRt1BfqFLpK3OfazzKgSSlAyeg", "record": "CVE-2024-4836", "field": "creation_timestamp", "uuid": "c37ace29-acee-4e4e-a6a1-b36e8353cfe1"}, {"timestamp": "2024-08-31T12:42:28Z", "date_only": false, "value": "2024-08-31T12:42:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3v_L1Km8kHglM99z9Gx-p2lsvnYIaRU3JVXDXxZhsRyM6xs7", "record": "CVE-2024-4836", "field": "creation_timestamp", "uuid": "787d347d-b9a6-4019-a823-92c79cc18b29"}, {"timestamp": "2024-08-31T13:09:22Z", "date_only": false, "value": "2024-08-31T13:09:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1580", "record": "CVE-2024-4836", "field": "creation_timestamp", "uuid": "5f35ac0d-3f38-4d2c-9bf2-83091cd991f9", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1580"}, {"timestamp": "2024-09-02T21:35:26Z", "date_only": false, "value": "2024-09-02T21:35:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/leak503/506", "record": "CVE-2024-4836", "field": "creation_timestamp", "uuid": "3f60230b-79a1-46a9-8c87-c87612666a84", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/leak503/506"}, {"timestamp": "2024-09-07T05:42:04Z", "date_only": false, "value": "2024-09-07T05:42:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1520", "record": "CVE-2024-4836", "field": "creation_timestamp", "uuid": "500b4333-6a72-476e-9de4-462088700684", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1520"}, {"timestamp": "2024-09-07T05:42:04Z", "date_only": false, "value": "2024-09-07T05:42:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1531", "record": "CVE-2024-4836", "field": "creation_timestamp", "uuid": "d8a54025-f169-4372-9bca-031a666ba019", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1531"}, {"timestamp": "2024-09-07T16:14:23Z", "date_only": false, "value": "2024-09-07T16:14:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/454", "record": "CVE-2024-4836", "field": "creation_timestamp", "uuid": "ce2cddfa-168d-4117-902b-c4bbc1df0a56", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/ton618cyber/454"}, {"timestamp": "2024-09-13T16:57:01Z", "date_only": false, "value": "2024-09-13T16:57:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1602", "record": "CVE-2024-4836", "field": "creation_timestamp", "uuid": "8f44c177-b696-4f63-b3dd-36e5cf4fb507", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1602"}, {"timestamp": "2024-10-18T12:25:41Z", "date_only": false, "value": "2024-10-18T12:25:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1615", "record": "CVE-2024-4836", "field": "creation_timestamp", "uuid": "2cff0d03-6bbb-4464-a8b5-90edfa97b636", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1615"}, {"timestamp": "2024-10-18T12:26:48Z", "date_only": false, "value": "2024-10-18T12:26:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/74IzvRfHv6As3hyVMCWy5rx44qm1MKm9hZLdVsqv0WV9bgP1", "record": "CVE-2024-4836", "field": "creation_timestamp", "uuid": "4b38c588-b35c-402e-b8c8-7c591b4e249c"}, {"timestamp": "2024-11-12T20:45:56Z", "date_only": false, "value": "2024-11-12T20:45:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackerInvestigationZone/9", "record": "CVE-2024-4836", "field": "creation_timestamp", "uuid": "b29c4ee2-31d5-49e5-b400-61e3f39eb741", "content": "\ud83d\udea8_CvEploiterv2 x xWPv3 Ultimate/Beast Software\n\n\ud83c\udfafThe most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n\u00a0\u00a0\u00a0\u00a0 with the latest version/method.]\n\n\u2699\ufe0fCVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n \u2699\ufe0fCVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n\u2699\ufe0fCVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n\u2699\ufe0fCVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n\u2699\ufe0fCVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n\u2699\ufe0f#CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n\u2699\ufe0fCVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n\u2699\ufe0fCVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n\u2699\ufe0fCVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\n#Investigation_of_hacking \n#Cyber_Security_News\n#codeb0ss", "url": "https://t.me/HackerInvestigationZone/9"}, {"timestamp": "2024-11-30T13:27:14Z", "date_only": false, "value": "2024-11-30T13:27:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1634", "record": "CVE-2024-4836", "field": "creation_timestamp", "uuid": "8cc95e0c-b7d0-44c9-bd0e-2611bdab2b1a", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1634"}, {"timestamp": "2024-12-18T18:01:34Z", "date_only": false, "value": "2024-12-18T18:01:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1653", "record": "CVE-2024-4836", "field": "creation_timestamp", "uuid": "38af657f-a87b-4f1b-bf3c-80100ebabd5a", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1653"}, {"timestamp": "2025-03-16T00:41:48Z", "date_only": false, "value": "2025-03-16T00:41:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyber_hsecurity/3301", "record": "CVE-2024-4836", "field": "creation_timestamp", "uuid": "ebda778c-35b0-4571-8cbf-a666841b0a41", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/cyber_hsecurity/3301"}, {"timestamp": "2026-06-17T08:03:01.077Z", "date_only": false, "value": "2026-06-17T08:03:01.077", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4836", "record": "FKIE_CVE-2024-4836", "field": "lastModified"}]}