{"metadata": {"vulnerability": "CVE-2025-2563", "count": 40, "kinds": {"milestone": 4, "sighting": 28, "kev": 0, "other": 8}}, "data": [{"timestamp": "2025-03-20T14:53:49.061Z", "date_only": false, "value": "2025-03-20T14:53:49.061Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-2563", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-27T04:24:00.857Z", "date_only": false, "value": "2025-03-27T04:24:00.857639Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lldhdf3oje2k", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "65d7f77a-1961-4c02-8628-dab95cd9fa29", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lldhdf3oje2k"}, {"timestamp": "2025-03-29T12:05:35Z", "date_only": false, "value": "2025-03-29T12:05:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/26740", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "5b55c90d-e807-4989-88bd-f4505d7fc61e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-2563 PoC\nURL\uff1ahttps://github.com/ubaydev/CVE-2025-2563\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/26740"}, {"timestamp": "2025-03-29T16:00:07Z", "date_only": false, "value": "2025-03-29T16:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/iXXrSRZXi-ojvdasxd-BMH7IqLKZibvE0e6rFuxhoF-GkT8", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "fb40b0a6-8a14-4f6c-a0bd-7a757f623a9d"}, {"timestamp": "2025-04-05T06:37:30Z", "date_only": false, "value": "2025-04-05T06:37:30.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-2563.yaml", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "4bb492aa-ec15-463f-a1a6-3fa78dec3c42", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-2563.yaml"}, {"timestamp": "2025-04-14T06:00:09.509Z", "date_only": false, "value": "2025-04-14T06:00:09.509Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-2563", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-14T06:15:16Z", "date_only": false, "value": "2025-04-14T06:15:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JXH5-F52Q-732J", "record": "GHSA-JXH5-F52Q-732J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-14T06:15:16.333Z", "date_only": false, "value": "2025-04-14T06:15:16.333", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-2563", "record": "FKIE_CVE-2025-2563", "field": "published"}, {"timestamp": "2025-04-14T06:30:24Z", "date_only": false, "value": "2025-04-14T06:30:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JXH5-F52Q-732J", "record": "GHSA-JXH5-F52Q-732J", "field": "published"}, {"timestamp": "2025-04-14T06:53:47Z", "date_only": false, "value": "2025-04-14T06:53:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11583", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "39d4034c-003b-431f-bffa-d0dbc46c9207", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2563\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The User Registration & Membership  WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges\n\ud83d\udccf Published: 2025-04-14T06:00:09.509Z\n\ud83d\udccf Modified: 2025-04-14T06:00:09.509Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/2c0f62a1-9510-4f90-a297-17634e6c8b75/", "url": "https://t.me/DarkWebInformer_CVEAlerts/11583"}, {"timestamp": "2025-04-14T10:28:53Z", "date_only": false, "value": "2025-04-14T10:28:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/22831", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "8274d39f-5832-46fc-ae51-50068b40b96e", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2563 - \"WordPress User Registration & Membership Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2563 \nPublished : April 14, 2025, 6:15 a.m. | 2\u00a0hours, 4\u00a0minutes ago \nDescription : The User Registration & Membership  WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/22831"}, {"timestamp": "2025-04-14T10:33:21.725Z", "date_only": false, "value": "2025-04-14T10:33:21.725578Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmreed5kya24", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "4ea9f67c-a808-42f0-b975-071853330d14", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmreed5kya24"}, {"timestamp": "2025-04-14T14:20:27.435Z", "date_only": false, "value": "2025-04-14T14:20:27.435239Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-2563", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-04-14T14:20:27.435Z", "date_only": false, "value": "2025-04-14T14:20:27.435239Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-2563", "record": "FKIE_CVE-2025-2563", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-14T14:20:32.047Z", "date_only": false, "value": "2025-04-14T14:20:32.047Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-2563", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-14T15:31:57Z", "date_only": false, "value": "2025-04-14T15:31:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JXH5-F52Q-732J", "record": "GHSA-JXH5-F52Q-732J", "field": "modified"}, {"timestamp": "2025-04-14T16:48:22.302Z", "date_only": false, "value": "2025-04-14T16:48:22.302994Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114337336622665561", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "7a683b71-4b7c-45f5-bfbe-665f491944bf", "url": "https://mastodon.social/users/CyberSignaler/statuses/114337336622665561"}, {"timestamp": "2025-04-14T18:00:53Z", "date_only": false, "value": "2025-04-14T18:00:53.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/01jIZuykzV2ZEfUYuLOtc2ZkoWyJZmQDfLImJzcAZFdhESI", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "e95aa83f-1d48-46bc-8cc4-6c6f80c39587"}, {"timestamp": "2025-05-14T13:41:16Z", "date_only": false, "value": "2025-05-14T13:41:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_user_registration_membership_escalation.rb", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "f2cf2e71-3fb1-45e5-b765-5a77fab3a2f4", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_user_registration_membership_escalation.rb"}, {"timestamp": "2025-05-15T21:02:30.026Z", "date_only": false, "value": "2025-05-15T21:02:30.026059Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpafxtrhmp2r", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "aef073d8-b2d2-4ee3-8c53-c8319c4a6177", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpafxtrhmp2r"}, {"timestamp": "2025-05-24T10:28:08Z", "date_only": false, "value": "2025-05-24T10:28:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/breachdetector/771061", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "3b8102fc-298d-4943-bc74-edbdc7aed191", "content": "{\n  \"Source\": \"https://htdark.com/index.php\",\n  \"Content\": \"Metasploit - Add Unauthenticated privesc for WP User Registration & Membership plugin (CVE-2025-2563)\", \n  \"author\": \" (dEEpEst)\",\n  \"Detection Date\": \"24 May 2025\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "url": "https://t.me/breachdetector/771061"}, {"timestamp": "2025-06-25T00:39:13Z", "date_only": false, "value": "2025-06-25T00:39:13.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/nVjbyWi1OTQqVrCfCpVg9HGjFoxjWvVL_Heny3L18ja2tx5m", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "a6f12c6b-229a-4d03-8f66-65ced74a3729"}, {"timestamp": "2025-06-25T00:39:14Z", "date_only": false, "value": "2025-06-25T00:39:14.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-QOyMiowJoIyiMyTWDmr53uOV1Gxrf1KetOkwLf9_gvu4z0", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "4f5fc975-accb-409c-b387-e5a08d1b185b"}, {"timestamp": "2025-06-25T17:32:32Z", "date_only": false, "value": "2025-06-25T17:32:32.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/EKi3juhW8KdvSrT-C52NnQYma9e80zcUs_26vGBIli1oz3UL", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "88a59869-fcf5-4cf9-a16a-08afe57e2558"}, {"timestamp": "2025-08-27T12:00:20.215Z", "date_only": false, "value": "2025-08-27T12:00:20.215Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-2563", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-08-27T12:00:20.215Z", "date_only": false, "value": "2025-08-27T12:00:20.215Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2025-2563", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-23T21:13:04Z", "date_only": false, "value": "2025-10-23T21:13:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "c52ce2e2-2e44-46c3-a76f-547038323093"}, {"timestamp": "2026-04-18T11:00:12Z", "date_only": false, "value": "2026-04-18T11:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/56SNjB68nyULYTdkaeIILQI4ytkQLoACBGmTDoXIf258Id4", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "3ae98753-2a13-49d6-8047-820dd054092a"}, {"timestamp": "2026-04-18T15:00:07Z", "date_only": false, "value": "2026-04-18T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/O7yR2b4OLQp6kid0WdGHPQvQVIbLyZOFm8IdlAgSGDL0FUM", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "15b4607a-b883-47af-8c93-13a266a022ef"}, {"timestamp": "2026-04-20T03:00:09Z", "date_only": false, "value": "2026-04-20T03:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/T_t278HVRV5FNiuWOcnHRGLAtJdDH1ZkJoft_1GQHmwS1uI", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "78ea81b0-909d-4b5d-b710-d4e44e7cb30e"}, {"timestamp": "2026-04-20T09:00:05Z", "date_only": false, "value": "2026-04-20T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/pmzKbihchBYeJvBnkfYLk5LESIxSAVi0zGHv3QahmixU_js", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "80eba3c9-6c2b-4bbb-a638-9d7931201e89"}, {"timestamp": "2026-06-17T09:07:11.293Z", "date_only": false, "value": "2026-06-17T09:07:11.293", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-2563", "record": "FKIE_CVE-2025-2563", "field": "lastModified"}, {"timestamp": "2026-07-09T03:00:08.221Z", "date_only": false, "value": "2026-07-09T03:00:08.221046Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1898", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "1c7b4c3b-7417-44a4-9d20-79ba5159abba", "url": "https://t.me/brutsecurity/1898"}, {"timestamp": "2026-07-10T00:00:31.731Z", "date_only": false, "value": "2026-07-10T00:00:31.731697Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1898", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "7acb560c-25a5-4220-adb1-3c3d389ceeb7", "url": "https://t.me/brutsecurity/1898"}, {"timestamp": "2026-07-11T13:00:05.648Z", "date_only": false, "value": "2026-07-11T13:00:05.648404Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1898", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "a40dc65c-8d51-4b80-9f39-8b3196e43076", "url": "https://t.me/brutsecurity/1898"}, {"timestamp": "2026-07-12T00:00:49.671Z", "date_only": false, "value": "2026-07-12T00:00:49.671598Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1898", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "83558857-a280-4b67-8639-d637ac9e035a", "url": "https://t.me/brutsecurity/1898"}, {"timestamp": "2026-08-27T12:00:05.741Z", "date_only": false, "value": "2026-08-27T12:00:05.741520Z", "kind": "sighting", "label": "Seen", "source": "Telegram/qGjGKvIHGl6Yn5_gHhOpvFnUuL8T5z_DsxEiDzeWGTkisZw", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "49f442a6-1727-4002-9f1c-f8db0d629528"}, {"timestamp": "2026-08-27T12:00:09.920Z", "date_only": false, "value": "2026-08-27T12:00:09.920656Z", "kind": "sighting", "label": "Seen", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "03ae67fd-b5ff-4c1d-87ca-aae87d8fa32f"}, {"timestamp": "2026-08-28T00:00:44.129Z", "date_only": false, "value": "2026-08-28T00:00:44.129783Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qGjGKvIHGl6Yn5_gHhOpvFnUuL8T5z_DsxEiDzeWGTkisZw", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "08211347-7cd8-4146-a965-6b6a24c927c6"}, {"timestamp": "2026-08-29T00:00:27.880Z", "date_only": false, "value": "2026-08-29T00:00:27.880952Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "record": "CVE-2025-2563", "field": "creation_timestamp", "uuid": "d419ed9e-b9ff-42e1-b68d-3909feb79994"}]}