{"metadata": {"vulnerability": "CVE-2024-8425", "count": 44, "kinds": {"milestone": 4, "sighting": 20, "kev": 11, "other": 9}}, "data": [{"timestamp": "2024-09-04T14:18:47.023Z", "date_only": false, "value": "2024-09-04T14:18:47.023Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-8425", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-27T19:46:01Z", "date_only": false, "value": "2025-02-27T19:46:01.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2024-8425", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-02-28T08:23:16.648Z", "date_only": false, "value": "2025-02-28T08:23:16.648Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-8425", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-02-28T09:15:11Z", "date_only": false, "value": "2025-02-28T09:15:11Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7295-JW97-QRVM", "record": "GHSA-7295-JW97-QRVM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-02-28T09:15:11.083Z", "date_only": false, "value": "2025-02-28T09:15:11.083", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-8425", "record": "FKIE_CVE-2024-8425", "field": "published"}, {"timestamp": "2025-02-28T09:27:33Z", "date_only": false, "value": "2025-02-28T09:27:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5860", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "2cd0e7f3-53dd-4c78-9872-a38075d3fcda", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-8425\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwb_wgm_preview_mail' and 'mwb_wgm_woocommerce_add_cart_item_data' functions in all versions up to, and including, 2.6.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.\n\ud83d\udccf Published: 2025-02-28T08:23:16.648Z\n\ud83d\udccf Modified: 2025-02-28T08:23:16.648Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6ebffb82-7455-40c9-9ffd-b78e0e73e431?source=cve\n2. https://codecanyon.net/item/woocommerce-ultimate-gift-card/19191057", "url": "https://t.me/DarkWebInformer_CVEAlerts/5860"}, {"timestamp": "2025-02-28T09:30:54Z", "date_only": false, "value": "2025-02-28T09:30:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7295-JW97-QRVM", "record": "GHSA-7295-JW97-QRVM", "field": "published"}, {"timestamp": "2025-02-28T09:30:54Z", "date_only": false, "value": "2025-02-28T09:30:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7295-JW97-QRVM", "record": "GHSA-7295-JW97-QRVM", "field": "modified"}, {"timestamp": "2025-02-28T11:10:24Z", "date_only": false, "value": "2025-02-28T11:10:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/19135", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "43c6d141-c40d-41df-ab17-dd89cb6a9655", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-8425 - WooCommerce Ultimate Gift Card Remote File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-8425 \nPublished : Feb. 28, 2025, 9:15 a.m. | 51\u00a0minutes ago \nDescription : The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwb_wgm_preview_mail' and 'mwb_wgm_woocommerce_add_cart_item_data' functions in all versions up to, and including, 2.6.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/19135"}, {"timestamp": "2025-02-28T11:48:48.321Z", "date_only": false, "value": "2025-02-28T11:48:48.321008Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114081354392866059", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "43599326-c0a9-40b3-9a90-eb7c71f48088", "url": "https://mastodon.social/users/CyberSignaler/statuses/114081354392866059"}, {"timestamp": "2025-02-28T13:24:47.114Z", "date_only": false, "value": "2025-02-28T13:24:47.114614Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-8425", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-28T13:24:47.114Z", "date_only": false, "value": "2025-02-28T13:24:47.114614Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-8425", "record": "FKIE_CVE-2024-8425", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-28T13:25:10.969Z", "date_only": false, "value": "2025-02-28T13:25:10.969Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-8425", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-19T11:00:06Z", "date_only": false, "value": "2025-04-19T11:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/cFDIr9N6sAkWZhwxw-_ECaT3TnOsVF3ZAMr3hMtqAqO8clo", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "b9546744-ea22-4009-9c0b-772c9ae4b411"}, {"timestamp": "2025-07-24T21:02:23.378Z", "date_only": false, "value": "2025-07-24T21:02:23.378615Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3luqgm56i7q23", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "7f144681-4d70-45f8-a907-7a426505f628", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3luqgm56i7q23"}, {"timestamp": "2025-08-09T13:26:56Z", "date_only": false, "value": "2025-08-09T13:26:56.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "21fad511-6efd-4d02-ac65-8fddaa415286"}, {"timestamp": "2025-08-11T18:47:38Z", "date_only": false, "value": "2025-08-11T18:47:38.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "39d8563a-bcb5-4678-9eaf-22c5e6dd3d20"}, {"timestamp": "2025-09-10T21:02:33.274Z", "date_only": false, "value": "2025-09-10T21:02:33.274317Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lyj4yknipj2r", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "d2ec6a67-a192-4a86-8c45-e8b8134d7d90", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lyj4yknipj2r"}, {"timestamp": "2025-11-14T03:28:53Z", "date_only": false, "value": "2025-11-14T03:28:53+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2024-8425", "field": "timestamps.asserted_at", "uuid": "7a8503ee-5538-4a89-8c27-4b057a6d47eb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-11-14T03:28:53Z", "date_only": false, "value": "2025-11-14T03:28:53+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-8425", "field": "timestamps.first_seen_at", "uuid": "7a8503ee-5538-4a89-8c27-4b057a6d47eb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-15T00:00:00Z", "date_only": false, "value": "2026-03-15T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-8425", "field": "timestamps.asserted_at", "uuid": "e2430898-52e0-4d61-adac-844c1f2a0d68", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-15T00:00:00Z", "date_only": false, "value": "2026-03-15T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-8425", "field": "evidence.0.details.added_date", "uuid": "e2430898-52e0-4d61-adac-844c1f2a0d68", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-15T00:00:00Z", "date_only": false, "value": "2026-03-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-15)", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "07b671ce-2964-4990-b6f0-26da6fcf7e6e"}, {"timestamp": "2026-03-15T00:00:00Z", "date_only": false, "value": "2026-03-15T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-8425", "field": "timestamps.first_seen_at", "uuid": "e2430898-52e0-4d61-adac-844c1f2a0d68", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-15T00:00:00Z", "date_only": false, "value": "2026-03-15T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-8425", "field": "status.status_updated_at", "uuid": "e2430898-52e0-4d61-adac-844c1f2a0d68", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-08T16:59:46.296Z", "date_only": false, "value": "2026-04-08T16:59:46.296Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-8425", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T16:59:46.296Z", "date_only": false, "value": "2026-04-08T16:59:46.296Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2024-8425", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-07T00:00:00Z", "date_only": false, "value": "2026-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-07)", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "125e0b8d-b4aa-4a84-93a6-6ad272ab5690"}, {"timestamp": "2026-05-08T00:00:00Z", "date_only": false, "value": "2026-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-08)", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "9321ceb2-49af-4698-b0c9-db3bf62ce5c0"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-28)", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "5ba002a4-4e9f-45d7-8584-ea692a6f1b29"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-03)", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "ce5971e2-3c52-4cf0-ab1a-70ad53ddf99c"}, {"timestamp": "2026-06-05T00:00:00Z", "date_only": false, "value": "2026-06-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-05)", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "7c730ef6-71a2-44b5-aa12-09db539957a3"}, {"timestamp": "2026-06-17T08:22:33.380Z", "date_only": false, "value": "2026-06-17T08:22:33.380", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-8425", "record": "FKIE_CVE-2024-8425", "field": "lastModified"}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-8425", "field": "timestamps.recorded_at", "uuid": "e2430898-52e0-4d61-adac-844c1f2a0d68", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:33.650Z", "date_only": false, "value": "2026-06-19T12:42:33.650727Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e2430898-52e0-4d61-adac-844c1f2a0d68", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "e63d1954-da64-4ce6-a230-4f416b64a366", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e2430898-52e0-4d61-adac-844c1f2a0d68"}, {"timestamp": "2026-06-19T12:45:38.024Z", "date_only": false, "value": "2026-06-19T12:45:38.024452Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/895fb3da-25c2-4b89-8bfb-a4cf94a580b8", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "19c83d80-9f05-4284-961c-ac00ccdd5d21", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/895fb3da-25c2-4b89-8bfb-a4cf94a580b8"}, {"timestamp": "2026-06-23T14:03:05.977Z", "date_only": false, "value": "2026-06-23T14:03:05.977943Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ff8c180a-fd3f-4112-8364-efe58399fa86", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "ca3814d6-d230-4613-95ba-d0c24d2c60ee", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ff8c180a-fd3f-4112-8364-efe58399fa86"}, {"timestamp": "2026-06-27T10:15:11.159Z", "date_only": false, "value": "2026-06-27T10:15:11.159822Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-26)", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "d1b2622b-975e-4e6b-955b-0e5c00c634d6"}, {"timestamp": "2026-06-30T09:23:14.585Z", "date_only": false, "value": "2026-06-30T09:23:14.585695Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5d52a7bd-e68e-446f-bcb3-785d407c9351", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "e9fa4473-7bb5-44c5-8c72-f7a7897182ba", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5d52a7bd-e68e-446f-bcb3-785d407c9351"}, {"timestamp": "2026-07-01T05:54:09.400Z", "date_only": false, "value": "2026-07-01T05:54:09.400276Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/7a8503ee-5538-4a89-8c27-4b057a6d47eb", "record": "CVE-2024-8425", "field": "creation_timestamp", "uuid": "394829f6-f5e0-441a-a508-5247e3136e91", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/7a8503ee-5538-4a89-8c27-4b057a6d47eb"}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2024-8425", "field": "timestamps.last_seen_at", "uuid": "7a8503ee-5538-4a89-8c27-4b057a6d47eb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": true, "value": "2026-10-20", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2024-8425", "field": "evidence.0.details.observation_date", "uuid": "7a8503ee-5538-4a89-8c27-4b057a6d47eb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2024-8425", "field": "status.status_updated_at", "uuid": "7a8503ee-5538-4a89-8c27-4b057a6d47eb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-22T01:00:02Z", "date_only": false, "value": "2026-10-22T01:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2024-8425", "field": "timestamps.recorded_at", "uuid": "7a8503ee-5538-4a89-8c27-4b057a6d47eb", "status": {"status_reason": "confirmed", "exploited": true}}]}