{"metadata": {"vulnerability": "CVE-2024-6366", "count": 22, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-06-27T01:09:24.875Z", "date_only": false, "value": "2024-06-27T01:09:24.875Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-6366", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-07-29T06:00:08.248Z", "date_only": false, "value": "2024-07-29T06:00:08.248Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-6366", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-07-29T06:00:08.248Z", "date_only": false, "value": "2024-07-29T06:00:08.248Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2024-6366", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-29T06:15:02Z", "date_only": false, "value": "2024-07-29T06:15:02Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WRPC-6V65-CC7F", "record": "GHSA-WRPC-6V65-CC7F", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-07-29T06:15:02.790Z", "date_only": false, "value": "2024-07-29T06:15:02.790", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6366", "record": "FKIE_CVE-2024-6366", "field": "published"}, {"timestamp": "2024-07-29T06:30:26Z", "date_only": false, "value": "2024-07-29T06:30:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WRPC-6V65-CC7F", "record": "GHSA-WRPC-6V65-CC7F", "field": "published"}, {"timestamp": "2024-07-29T08:45:53Z", "date_only": false, "value": "2024-07-29T08:45:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/1809", "record": "CVE-2024-6366", "field": "creation_timestamp", "uuid": "c77924c2-be4b-46b7-9dbc-57ee54404b03", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6366 - WordPress User Profile Builder Media Upload Unauthorized Access\", \n  \"Content\": \"CVE ID : CVE-2024-6366 \nPublished : July 29, 2024, 6:15 a.m. | 27\u00a0minutes ago \nDescription : The User Profile Builder  WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/1809"}, {"timestamp": "2024-07-29T13:34:19.737Z", "date_only": false, "value": "2024-07-29T13:34:19.737367Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-6366", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-07-29T13:34:19.737Z", "date_only": false, "value": "2024-07-29T13:34:19.737367Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6366", "record": "FKIE_CVE-2024-6366", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-07-29T18:35:53.964Z", "date_only": false, "value": "2024-07-29T18:35:53.964Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-6366", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T15:32:13Z", "date_only": false, "value": "2024-08-01T15:32:13Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WRPC-6V65-CC7F", "record": "GHSA-WRPC-6V65-CC7F", "field": "modified"}, {"timestamp": "2024-08-01T21:33:05.436Z", "date_only": false, "value": "2024-08-01T21:33:05.436Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-6366", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-01T21:33:05.436Z", "date_only": false, "value": "2024-08-01T21:33:05.436Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-6366", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-30T02:03:46Z", "date_only": false, "value": "2024-10-30T02:03:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bads_community/1492", "record": "CVE-2024-6366", "field": "creation_timestamp", "uuid": "32d1ab40-0f40-4c63-aa90-36378e35b750", "content": "\ud83d\udcccCVE-2024-6366 PoC - Upload media files via the async upload functionality of WP\ud83d\udccc\n\n\ud83d\udc8eJoin Our Channel > Click_Me\ud83d\udc8e", "url": "https://t.me/bads_community/1492"}, {"timestamp": "2024-10-30T02:03:46Z", "date_only": false, "value": "2024-10-30T02:03:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bads_community/51210", "record": "CVE-2024-6366", "field": "creation_timestamp", "uuid": "65e7cddf-4f21-48e4-84b6-877bb302e4eb", "content": "\ud83d\udcccCVE-2024-6366 PoC - Upload media files via the async upload functionality of WP\ud83d\udccc\n\n\ud83d\udc8eJoin Our Channel > Click_Me\ud83d\udc8e", "url": "https://t.me/bads_community/51210"}, {"timestamp": "2024-10-30T02:03:46Z", "date_only": false, "value": "2024-10-30T02:03:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/mad_hackers_community/385", "record": "CVE-2024-6366", "field": "creation_timestamp", "uuid": "5698e58d-8069-4e9d-8662-b7cde5fc6d83", "content": "\ud83d\udcccCVE-2024-6366 PoC - Upload media files via the async upload functionality of WP\ud83d\udccc\n\n\ud83d\udc8eJoin Our Channel > Click_Me\ud83d\udc8e", "url": "https://t.me/mad_hackers_community/385"}, {"timestamp": "2024-10-30T02:04:30Z", "date_only": false, "value": "2024-10-30T02:04:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/six5zeroexploit/78", "record": "CVE-2024-6366", "field": "creation_timestamp", "uuid": "a3e78ad1-81e4-4248-8091-9915c1300f04", "content": "\ud83d\udcccCVE-2024-6366 PoC - Upload media files via the async upload functionality of WP\ud83d\udccc\n\n\ud83d\udc8eJoin Our Channel > Click_Me\ud83d\udc8e", "url": "https://t.me/six5zeroexploit/78"}, {"timestamp": "2024-10-30T05:04:07Z", "date_only": false, "value": "2024-10-30T05:04:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Team_Dot33/720", "record": "CVE-2024-6366", "field": "creation_timestamp", "uuid": "68cc6587-9d31-4445-ba32-9bd49ce7fc1b", "content": "\ud83d\udcccCVE-2024-6366 PoC - Upload media files via the async upload functionality of WP\ud83d\udccc\n\n\ud83d\udc8eJoin Our Channel > Click_Me\ud83d\udc8e", "url": "https://t.me/Team_Dot33/720"}, {"timestamp": "2024-12-04T06:41:09Z", "date_only": false, "value": "2024-12-04T06:41:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/iimvT4S3mC8addjzM33kS46qJCQRhHf3prvl9OhXElkVkA", "record": "CVE-2024-6366", "field": "creation_timestamp", "uuid": "fc91b64a-cd12-422c-9039-f122b162a31d"}, {"timestamp": "2025-02-02T22:00:05Z", "date_only": false, "value": "2025-02-02T22:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Zz7KT0QW6jx788iRVLTrCBTX3Cn9rhr0SRN7kgKXbioAX_Y", "record": "CVE-2024-6366", "field": "creation_timestamp", "uuid": "a4f4756c-73be-4e07-acb3-057b6557bbce"}, {"timestamp": "2025-02-03T04:00:10Z", "date_only": false, "value": "2025-02-03T04:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FOE-9o2GYa46QWZdm-KNmADlLvs_B0wLoRdfi76m1RCSVeM", "record": "CVE-2024-6366", "field": "creation_timestamp", "uuid": "b45d7627-ab20-4148-a589-dfc9e2026b11"}, {"timestamp": "2026-06-17T08:17:51.830Z", "date_only": false, "value": "2026-06-17T08:17:51.830", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6366", "record": "FKIE_CVE-2024-6366", "field": "lastModified"}]}