{"metadata": {"vulnerability": "CVE-2025-30911", "count": 22, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-03-26T09:21:38.618Z", "date_only": false, "value": "2025-03-26T09:21:38.618Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-30911", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-01T05:31:40.844Z", "date_only": false, "value": "2025-04-01T05:31:40.844Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-30911", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-01T06:15:54Z", "date_only": false, "value": "2025-04-01T06:15:54Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9H9Q-HM6H-279R", "record": "GHSA-9H9Q-HM6H-279R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-01T06:15:54.877Z", "date_only": false, "value": "2025-04-01T06:15:54.877", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-30911", "record": "FKIE_CVE-2025-30911", "field": "published"}, {"timestamp": "2025-04-01T06:30:47Z", "date_only": false, "value": "2025-04-01T06:30:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9H9Q-HM6H-279R", "record": "GHSA-9H9Q-HM6H-279R", "field": "published"}, {"timestamp": "2025-04-01T06:32:09Z", "date_only": false, "value": "2025-04-01T06:32:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9855", "record": "CVE-2025-30911", "field": "creation_timestamp", "uuid": "8610db4c-fc80-4279-9fa8-5b4dae8135a4", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-30911\n\ud83d\udd25 CVSS Score: 9.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Rometheme RomethemeKit For Elementor allows Command Injection. This issue affects RomethemeKit For Elementor: from n/a through 1.5.4.\n\ud83d\udccf Published: 2025-04-01T05:31:40.844Z\n\ud83d\udccf Modified: 2025-04-01T05:31:40.844Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/rometheme-for-elementor/vulnerability/wordpress-romethemekit-for-elementor-plugin-1-5-4-arbitrary-plugin-installation-activation-to-rce-vulnerability?_s_id=cve", "url": "https://t.me/DarkWebInformer_CVEAlerts/9855"}, {"timestamp": "2025-04-01T06:40:26.944Z", "date_only": false, "value": "2025-04-01T06:40:26.944858Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llqbbxlaxu2g", "record": "CVE-2025-30911", "field": "creation_timestamp", "uuid": "15afb2d3-b125-469d-b2c1-5364ca5e2b92", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llqbbxlaxu2g"}, {"timestamp": "2025-04-01T07:48:34.493Z", "date_only": false, "value": "2025-04-01T07:48:34.493157Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114261604002758949", "record": "CVE-2025-30911", "field": "creation_timestamp", "uuid": "e431b23b-5301-4e44-992b-50089d52a4ee", "url": "https://mastodon.social/users/CyberSignaler/statuses/114261604002758949"}, {"timestamp": "2025-04-01T07:48:34.511Z", "date_only": false, "value": "2025-04-01T07:48:34.511826Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114261604002758949", "record": "CVE-2025-30911", "field": "creation_timestamp", "uuid": "a8976525-ef3d-4e2f-b0a5-88c4284c28c3", "url": "https://mastodon.social/users/CyberSignaler/statuses/114261604002758949"}, {"timestamp": "2025-04-01T09:26:56Z", "date_only": false, "value": "2025-04-01T09:26:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/21734", "record": "CVE-2025-30911", "field": "creation_timestamp", "uuid": "71fccf60-c985-43a3-907f-b472e062db49", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-30911 - Rometheme RomethemeKit For Elementor Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-30911 \nPublished : April 1, 2025, 6:15 a.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : Improper Control of Generation of Code ('Code Injection') vulnerability in Rometheme RomethemeKit For Elementor allows Command Injection. This issue affects RomethemeKit For Elementor: from n/a through 1.5.4. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/21734"}, {"timestamp": "2025-04-01T14:02:52.824Z", "date_only": false, "value": "2025-04-01T14:02:52.824116Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-30911", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-01T14:02:52.824Z", "date_only": false, "value": "2025-04-01T14:02:52.824116Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-30911", "record": "FKIE_CVE-2025-30911", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-01T14:13:49.474Z", "date_only": false, "value": "2025-04-01T14:13:49.474Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-30911", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-04T08:14:18Z", "date_only": false, "value": "2025-04-04T08:14:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/29615", "record": "CVE-2025-30911", "field": "creation_timestamp", "uuid": "c3c25056-7ca8-4b68-a07c-0d5aa8956157", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1a WordPress RomethemeKit For Elementor Plugin <= 1.5.4 is vulnerable to Remote Code Execution (RCE) \nURL\uff1ahttps://github.com/Nxploited/CVE-2025-30911\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/29615"}, {"timestamp": "2025-04-04T17:00:08Z", "date_only": false, "value": "2025-04-04T17:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/vqtjuMLGwB8CfMcT7xPtIvwg7iwQAPBQTP4IVPzRVFyy0jQ", "record": "CVE-2025-30911", "field": "creation_timestamp", "uuid": "49377695-e90d-4e3f-8d9e-739877513879"}, {"timestamp": "2025-04-05T21:00:06Z", "date_only": false, "value": "2025-04-05T21:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/gptxcG5Jvg83wR56zKKTs8fGBMXLE7PNQ-HCnd7IEVmsKx8", "record": "CVE-2025-30911", "field": "creation_timestamp", "uuid": "5b53b2cf-fa74-47ff-b074-d049053c2a4e"}, {"timestamp": "2025-04-17T12:36:41.430Z", "date_only": false, "value": "2025-04-17T12:36:41.430426Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmz4npajbw2h", "record": "CVE-2025-30911", "field": "creation_timestamp", "uuid": "48d18c35-9283-4ed6-9967-aca5bf9de0ec", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmz4npajbw2h"}, {"timestamp": "2026-04-01T16:36:37.643Z", "date_only": false, "value": "2026-04-01T16:36:37.643Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Patchstack", "record": "CVE-2025-30911", "field": "containers.cna.datePublic"}, {"timestamp": "2026-04-01T18:34:18Z", "date_only": false, "value": "2026-04-01T18:34:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9H9Q-HM6H-279R", "record": "GHSA-9H9Q-HM6H-279R", "field": "modified"}, {"timestamp": "2026-04-28T16:12:00.350Z", "date_only": false, "value": "2026-04-28T16:12:00.350Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-30911", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-28T16:12:00.350Z", "date_only": false, "value": "2026-04-28T16:12:00.350Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Patchstack", "record": "CVE-2025-30911", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T09:09:33.717Z", "date_only": false, "value": "2026-06-17T09:09:33.717", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-30911", "record": "FKIE_CVE-2025-30911", "field": "lastModified"}]}