{"metadata": {"vulnerability": "CVE-2025-3102", "count": 100, "kinds": {"milestone": 4, "sighting": 75, "kev": 11, "other": 10}}, "data": [{"timestamp": "2025-04-01T18:27:15.860Z", "date_only": false, "value": "2025-04-01T18:27:15.860Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-3102", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-09T09:38:42Z", "date_only": false, "value": "2025-04-09T09:38:42+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-3102", "field": "timestamps.asserted_at", "uuid": "289c84bf-367b-478d-a58d-390f3c0a2831", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-09T09:38:42Z", "date_only": false, "value": "2025-04-09T09:38:42.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-3102", "field": "evidence.0.details.added_date", "uuid": "289c84bf-367b-478d-a58d-390f3c0a2831", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-09T09:38:42Z", "date_only": false, "value": "2025-04-09T09:38:42+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-3102", "field": "timestamps.first_seen_at", "uuid": "289c84bf-367b-478d-a58d-390f3c0a2831", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-09T09:38:42Z", "date_only": false, "value": "2025-04-09T09:38:42+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-3102", "field": "status.status_updated_at", "uuid": "289c84bf-367b-478d-a58d-390f3c0a2831", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-09T16:19:25Z", "date_only": false, "value": "2025-04-09T16:19:25.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2025-3102", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2025-04-10T04:22:05.560Z", "date_only": false, "value": "2025-04-10T04:22:05.560Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-3102", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-10T04:49:04Z", "date_only": false, "value": "2025-04-10T04:49:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11192", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "37e3ebe0-9bb9-4b45-a303-c8244a7c8289", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3102\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The SureTriggers: All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative account creation due to a missing empty value check on the 'secret_key' value in the 'autheticate_user' function in all versions up to, and including, 1.0.78. This makes it possible for unauthenticated attackers to create administrator accounts on the target website when the plugin is installed and activated but not configured with an API key.\n\ud83d\udccf Published: 2025-04-10T04:22:05.560Z\n\ud83d\udccf Modified: 2025-04-10T04:22:05.560Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ec017311-f150-4a14-a4b4-b5634f574e2b?source=cve\n2. https://plugins.trac.wordpress.org/browser/suretriggers/trunk/src/Controllers/RestController.php#L59\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3266499%40suretriggers%2Ftrunk&old=3264905%40suretriggers%2Ftrunk&sfp_email=&sfph_mail=", "url": "https://t.me/DarkWebInformer_CVEAlerts/11192"}, {"timestamp": "2025-04-10T05:15:38Z", "date_only": false, "value": "2025-04-10T05:15:38Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RP6H-6758-G8CH", "record": "GHSA-RP6H-6758-G8CH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-10T05:15:38.990Z", "date_only": false, "value": "2025-04-10T05:15:38.990", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3102", "record": "FKIE_CVE-2025-3102", "field": "published"}, {"timestamp": "2025-04-10T06:30:23Z", "date_only": false, "value": "2025-04-10T06:30:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RP6H-6758-G8CH", "record": "GHSA-RP6H-6758-G8CH", "field": "published"}, {"timestamp": "2025-04-10T06:30:23Z", "date_only": false, "value": "2025-04-10T06:30:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RP6H-6758-G8CH", "record": "GHSA-RP6H-6758-G8CH", "field": "modified"}, {"timestamp": "2025-04-10T07:30:19Z", "date_only": false, "value": "2025-04-10T07:30:19.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/TrTtZDlxpbFpk8M-zmc8aWcsEx5X5eIera1FkEN864Om4qg", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "7637c304-1ea2-41d6-8fb1-b17e6f354ac1"}, {"timestamp": "2025-04-10T07:48:31.661Z", "date_only": false, "value": "2025-04-10T07:48:31.661052Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114312564628620572", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "4ed13453-f9c8-4c41-a57b-e41a0f48f683", "url": "https://mastodon.social/users/CyberSignaler/statuses/114312564628620572"}, {"timestamp": "2025-04-10T09:30:20Z", "date_only": false, "value": "2025-04-10T09:30:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/22623", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "8283af24-f247-4ee5-ac65-9a57a42211cf", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3102 - WordPress SureTriggers Plugin Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3102 \nPublished : April 10, 2025, 5:15 a.m. | 1\u00a0hour, 43\u00a0minutes ago \nDescription : The SureTriggers: All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative account creation due to a missing empty value check on the 'secret_key' value in the 'autheticate_user' function in all versions up to, and including, 1.0.78. This makes it possible for unauthenticated attackers to create administrator accounts on the target website when the plugin is installed and activated but not configured with an API key. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/22623"}, {"timestamp": "2025-04-10T13:10:24.525Z", "date_only": false, "value": "2025-04-10T13:10:24.525138Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-3102", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-10T13:10:24.525Z", "date_only": false, "value": "2025-04-10T13:10:24.525138Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3102", "record": "FKIE_CVE-2025-3102", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-10T13:10:32.671Z", "date_only": false, "value": "2025-04-10T13:10:32.671Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-3102", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-10T20:04:53.542Z", "date_only": false, "value": "2025-04-10T20:04:53.542213Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lmicgp4jay2m", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "85db8da2-09a9-4034-904e-502b2b3b2c69", "url": "https://bsky.app/profile/hackingne.ws/post/3lmicgp4jay2m"}, {"timestamp": "2025-04-11T02:58:00Z", "date_only": false, "value": "2025-04-11T02:58:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/04/ottokit-wordpress-plugin-admin-creation.html", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "e280077d-1c86-4b5a-a269-000b01521f7f", "url": "https://thehackernews.com/2025/04/ottokit-wordpress-plugin-admin-creation.html"}, {"timestamp": "2025-04-11T05:45:58.275Z", "date_only": false, "value": "2025-04-11T05:45:58.275490Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lmjcvq7jbv2e", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "48521d14-611b-442e-b757-8e553c94a0ed", "url": "https://bsky.app/profile/nimblenerd.social/post/3lmjcvq7jbv2e"}, {"timestamp": "2025-04-11T07:19:21Z", "date_only": false, "value": "2025-04-11T07:19:21.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6649", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "62dda3c3-56ed-4c25-8415-e194084c3636", "content": "ALERT \u2014 A critical OttoKit plugin flaw (CVE-2025-3102) is under active attack: 100K+ WordPress sites at risk.\n\nHackers can create admin accounts and fully take over vulnerable sites.\n\nCheck admin users \u2192 Remove any suspicious accounts.\n\n\ud83d\udc49 Full details: https://thehackernews.com/2025/04/ottokit-wordpress-plugin-admin-creation.html\n\nIf you use OttoKit, update to v1.0.79 NOW.", "url": "https://t.me/thehackernews/6649"}, {"timestamp": "2025-04-11T07:39:03Z", "date_only": false, "value": "2025-04-11T07:39:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/sOZt0PFvhp9ej4rUu2aQfp70VUbZXlJrSYK0gWlZFSsUGQ", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "b04e4de8-369e-4f7b-b4d3-a5785e6ef4d6"}, {"timestamp": "2025-04-11T07:41:52.414Z", "date_only": false, "value": "2025-04-11T07:41:52.414866Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-3a61bc9d-5f52594206041dc5", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "ef316551-ccd6-4375-bcbc-f8a4e7d09ec0", "url": "https://poliverso.org/objects/0477a01e-3a61bc9d-5f52594206041dc5"}, {"timestamp": "2025-04-11T07:56:23Z", "date_only": false, "value": "2025-04-11T07:56:23.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/5771", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "d6b2671a-f0af-4217-8e07-33d65007e1f2", "content": "\u200b\u26a1\ufe0f\u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 OttoKit \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e: \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 WordPress \u0443\u0436\u0435 \u0447\u0435\u0440\u0435\u0437 4 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 CVE\n\n\ud83d\udcac \u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 OttoKit (\u0440\u0430\u043d\u0435\u0435 SureTriggers ) \u0434\u043b\u044f WordPress \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0430\u0439\u0442\u043e\u043c.\n\nOttoKit \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0431\u0435\u0437 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 WordPress: \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a WooCommerce, Mailchimp \u0438 Google Sheets, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c CRM-\u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u043e \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435, \u043f\u043b\u0430\u0433\u0438\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 100 \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-3102 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 OttoKit \u0438 SureTriggers \u0434\u043e 1.0.78 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \u0415\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Wordfence, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u043e\u0434 \u043f\u0441\u0435\u0432\u0434\u043e\u043d\u0438\u043c\u043e\u043c mikemyers. \u0417\u0430 \u043d\u0430\u0445\u043e\u0434\u043a\u0443 \u043e\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 1024 \u0434\u043e\u043b\u043b\u0430\u0440\u0430. \u0412\u0435\u043d\u0434\u043e\u0440 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b \u2014 \u0443\u0436\u0435 3 \u0430\u043f\u0440\u0435\u043b\u044f \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u043e\u0434 \u043d\u043e\u043c\u0435\u0440\u043e\u043c 1.0.79 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 authenticate_user(), \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0447\u0435\u0440\u0435\u0437 REST API. \u041f\u0440\u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 API-\u043a\u043b\u044e\u0447\u0430 \u043f\u043b\u0430\u0433\u0438\u043d \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 \u043f\u0443\u0441\u0442\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 secret_key, \u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u043d\u0430 \u043f\u0443\u0441\u0442\u043e\u0442\u0443 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u043a\u043e\u0434\u0435 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a st_authorization \u0441 \u043f\u0443\u0441\u0442\u044b\u043c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044e.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u043c API-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442. \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0442\u0430\u043a\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043b\u0435\u0433\u043a\u043e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u0443\u044e\u0442\u0441\u044f. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Patchstack, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0431\u0430\u0433 \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u0447\u0435\u0442\u044b\u0440\u0435 \u0447\u0430\u0441\u0430 \u043f\u043e\u0441\u043b\u0435 \u0435\u0433\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0442\u0441\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435\u043c \u043d\u043e\u0432\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0441\u043a\u0438\u0445 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432 \u0441\u043e \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u043c\u0438 \u043b\u043e\u0433\u0438\u043d\u0430\u043c\u0438, \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 \u0438 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c\u0438 \u0430\u0434\u0440\u0435\u0441\u0430\u043c\u0438. \u042d\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0430\u0442\u0430\u043a, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0438\u043b\u0438 \u0431\u043e\u0442\u043e\u0432.\n\n\u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.0.79. \u0422\u0430\u043a\u0436\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043b\u043e\u0433\u0438 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439: \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u043e\u0432\u044b\u0445 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0442\u0435\u043c \u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043b\u0438 \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u042d\u0442\u0430 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0430\u0436\u043d\u043e \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0414\u0430\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/5771"}, {"timestamp": "2025-04-11T09:32:13.454Z", "date_only": false, "value": "2025-04-11T09:32:13.454565Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lmjpkbniqe2n", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "b0a0209a-953b-4c07-af8a-8f41ee26d60b", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lmjpkbniqe2n"}, {"timestamp": "2025-04-11T11:03:30.420Z", "date_only": false, "value": "2025-04-11T11:03:30.420082Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/114318993583529498", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "54a31c2c-fa3f-4934-b9b1-c344f38c0bce", "url": "https://infosec.exchange/users/dragonjar/statuses/114318993583529498"}, {"timestamp": "2025-04-11T12:12:32Z", "date_only": false, "value": "2025-04-11T12:12:32.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6936", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "a9bdf2e6-27c4-4e7b-8c51-802ee8178171", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Wordfence \u0432 \u0441\u0432\u043e\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u0443\u044e \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u044e \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c WordPress.\n\n\u0412\u0441\u0435\u0433\u043e \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 8000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 WP, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0438 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e 5 \u0438\u0437 8000 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u044f\u0434\u0440\u043e WordPress, \u0447\u0442\u043e \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e CMS \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u043b\u0430\u0441\u044c \u0432 \u043f\u043b\u0430\u043d\u0435 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0431\u043e\u043b\u0435\u0435 96% \u0432\u0441\u0435\u0445 \u044d\u0442\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043f\u043b\u0430\u0433\u0438\u043d\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0435\u0439\u0447\u0430\u0441 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u043d\u043e\u043c\u0435\u0440 \u043e\u0434\u0438\u043d \u0434\u043b\u044f \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 \u0441\u0430\u0439\u0442\u043e\u0432 WordPress.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u044f\u0440\u043a\u0438\u0439 \u043f\u0440\u0438\u043c\u0435\u0440 - OttoKit (\u0440\u0430\u043d\u0435\u0435 SureTriggers) \u0434\u043b\u044f WordPress, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435, \u0430\u043a\u0442\u0438\u0432\u0435\u043d \u043d\u0430 100 000 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432.\n\nOttoKit WordPress\u00a0\u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a WooCommerce, Mailchimp \u0438 Google Sheets, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u0437\u0430\u0434\u0430\u0447\u0438, \u043a\u0430\u043a \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0430 \u043f\u0438\u0441\u0435\u043c \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 CRM \u0431\u0435\u0437 \u043a\u043e\u0434\u0430.\n\nWordfence \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0442\u0447\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f mikemyers \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u043c\u0430\u0440\u0442\u0430.\n\n3 \u0430\u043f\u0440\u0435\u043b\u044f \u0443\u0448\u043b\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0441 \u043f\u043e\u043b\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0438 \u0432 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c \u0432\u044b\u0448\u043b\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.0.79.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0441\u0442\u043e\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 authenticate_user(), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e REST API. \n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430, \u0435\u0441\u043b\u0438 \u043f\u043b\u0430\u0433\u0438\u043d \u043d\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u043b\u044e\u0447\u0430 API, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0439 secret_key \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043f\u0443\u0441\u0442\u044b\u043c.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u0438\u043c, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u043f\u0443\u0441\u0442\u043e\u0439 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a st_authorization, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0442\u043e\u0447\u043a\u0430\u043c API.\n\n\u041f\u043e \u0441\u0443\u0442\u0438, CVE-2025-3102 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0441\u0430\u0439\u0442\u0430.\n\n9 \u0430\u043f\u0440\u0435\u043b\u044f Wordfence \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 OttoKit, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043a\u0430\u043a CVE-2025-3102, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 1.0.78.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0431\u044b\u0441\u0442\u0440\u043e \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n\u041f\u0435\u0440\u0432\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0431\u044b\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u0432\u043e\u0430\u043d\u044b \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u0443\u044e \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044e \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f/\u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u0430\u0434\u0440\u0435\u0441\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b, \u0447\u0442\u043e \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u043c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0434\u0430\u0447.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 OttoKit/SureTriggers - 1.0.79 \u0438 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0437\u0430\u043f\u0438\u0441\u044f\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432/\u0442\u0435\u043c, \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "url": "https://t.me/true_secator/6936"}, {"timestamp": "2025-04-11T12:26:14.375Z", "date_only": false, "value": "2025-04-11T12:26:14.375747Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmjzbcz77562", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "81656b7d-5cb5-4fd2-a9dd-31814938796f", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmjzbcz77562"}, {"timestamp": "2025-04-11T15:32:18Z", "date_only": false, "value": "2025-04-11T15:32:18.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ton618cyber/3522", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "7cac3ae0-81f2-4039-92a7-cb1af3048f20", "content": "OttoKit WordPress Plugin Admin Creation Vulnerability Under Active Exploitation\n\nA critical OttoKit plugin flaw CVE-2025-3102 exploited within hours lets attackers create admin accounts unchecked.\n\nThe Hacker News | thehackernews.com \u2022 Apr 11, 2025", "url": "https://t.me/ton618cyber/3522"}, {"timestamp": "2025-04-11T15:32:18Z", "date_only": false, "value": "2025-04-11T15:32:18.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ton618cyber/8824", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "bde6163b-fbe7-4f26-86c8-58f0a2b47f40", "content": "OttoKit WordPress Plugin Admin Creation Vulnerability Under Active Exploitation\n\nA critical OttoKit plugin flaw CVE-2025-3102 exploited within hours lets attackers create admin accounts unchecked.\n\nThe Hacker News | thehackernews.com \u2022 Apr 11, 2025", "url": "https://t.me/ton618cyber/8824"}, {"timestamp": "2025-04-11T17:14:19.679Z", "date_only": false, "value": "2025-04-11T17:14:19.679202Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/empist.bsky.social/post/3lmkjekjnjs2x", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "28a0c7f9-46f7-4912-a2f1-ebf4ad3e6c2e", "url": "https://bsky.app/profile/empist.bsky.social/post/3lmkjekjnjs2x"}, {"timestamp": "2025-04-11T17:37:56.918Z", "date_only": false, "value": "2025-04-11T17:37:56.918314Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lmkkosefsk2y", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "e2db8e31-e512-4f88-ab85-60508707167a", "url": "https://bsky.app/profile/aakl.bsky.social/post/3lmkkosefsk2y"}, {"timestamp": "2025-04-11T21:02:28.785Z", "date_only": false, "value": "2025-04-11T21:02:28.785131Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmkw4cvm372t", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "5ce40336-7157-46b3-bb86-181872e450bb", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmkw4cvm372t"}, {"timestamp": "2025-04-12T02:02:46Z", "date_only": false, "value": "2025-04-12T02:02:46.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberBulletin/3013", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "cee1f62a-5b49-4a31-a1c7-5b1bdb5555ab", "content": "\u26a1\ufe0fA critical OttoKit plugin flaw (CVE-2025-3102) is under active attack: 100K+ WordPress sites at risk.\n\nHackers can create admin accounts and fully take over vulnerable sites.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/3013"}, {"timestamp": "2025-04-12T04:26:10Z", "date_only": false, "value": "2025-04-12T04:26:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/31251", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "25787223-a050-4c09-9892-447226e0db59", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aEXPLOIT CVE-2025-3102 \nURL\uff1ahttps://github.com/xxmarcosrobertoxx/vanda-CVE-2025-3102\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/31251"}, {"timestamp": "2025-04-12T08:59:38.168Z", "date_only": false, "value": "2025-04-12T08:59:38.168065Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3lmm66wecnc2z", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "9df6fb29-125c-4c41-91cb-c5a4e5c16681", "url": "https://bsky.app/profile/securestep9.bsky.social/post/3lmm66wecnc2z"}, {"timestamp": "2025-04-12T11:00:06Z", "date_only": false, "value": "2025-04-12T11:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/YHR5LDl8bCoziN9wxHaTi6ArVs3jBR0B5N7TdotJGSgguKs", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "1f97f6ce-6964-43b8-ae0d-c0e7fdf2f629"}, {"timestamp": "2025-04-12T16:20:23.730Z", "date_only": false, "value": "2025-04-12T16:20:23.730306Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmmwt3mxyr2r", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "a4a30096-c635-4b0c-abfb-fa33dec9e29b", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmmwt3mxyr2r"}, {"timestamp": "2025-04-12T17:00:11Z", "date_only": false, "value": "2025-04-12T17:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/URqOiJy6jj4g4EvmcBVRx9BvwVfWdwMKgkptgqRz_hsO8qo", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "758067e3-ea81-4a3e-862c-1e3bafc94c67"}, {"timestamp": "2025-04-13T00:35:28Z", "date_only": false, "value": "2025-04-13T00:35:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://mstdn.ca/users/rfwaveio/statuses/114327848545432109", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "42debc23-9e21-476d-ac36-8fac2bd73439", "url": "https://mstdn.ca/users/rfwaveio/statuses/114327848545432109"}, {"timestamp": "2025-04-13T13:11:43.492Z", "date_only": false, "value": "2025-04-13T13:11:43.492313Z", "kind": "sighting", "label": "Exploited", "source": "https://patchstack.com/articles/critical-suretriggers-plugin-vulnerability-exploited-within-4-hours/", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "fffe4c05-ec7c-4927-86bd-a37f36ca8e15", "url": "https://patchstack.com/articles/critical-suretriggers-plugin-vulnerability-exploited-within-4-hours/"}, {"timestamp": "2025-04-13T18:19:53Z", "date_only": false, "value": "2025-04-13T18:19:53.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lmpnxosnxk2x", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "e494a052-2d1c-4c47-a051-9fca95aa03a7", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lmpnxosnxk2x"}, {"timestamp": "2025-04-14T05:42:10.378Z", "date_only": false, "value": "2025-04-14T05:42:10.378711Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3lmqu3os7dq2o", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "8f980885-5433-4969-8800-8e35bfbbd995", "url": "https://bsky.app/profile/calebpr.bsky.social/post/3lmqu3os7dq2o"}, {"timestamp": "2025-04-14T07:54:02.053Z", "date_only": false, "value": "2025-04-14T07:54:02.053290Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmr3hf6yck62", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "ce4f2fe8-cdc6-42d4-b411-90c44ed67dd9", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmr3hf6yck62"}, {"timestamp": "2025-04-14T17:00:07Z", "date_only": false, "value": "2025-04-14T17:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/K3G4aWQS7qLc_jUTWSo5csV7XU_qHMkvkvRj66ErRg9g6U4", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "40660607-1538-4698-a037-a20f55c963ae"}, {"timestamp": "2025-04-14T23:00:06Z", "date_only": false, "value": "2025-04-14T23:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3Hw0ti8HK8QOqtOY2rsuqDdNwUtzE1sTstZVcrt4AbtXgI8", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "3afddb0e-bc5e-4423-bde9-06ac2a89243f"}, {"timestamp": "2025-04-15T05:00:10Z", "date_only": false, "value": "2025-04-15T05:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mIQYUSqdZG0qC4ccPPwRpa360xwamTmZCIxoO7vEILe4Sa0", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "2d74c48f-dd91-4d88-857a-5d6c5b8c5f6d"}, {"timestamp": "2025-04-15T09:11:57.546Z", "date_only": false, "value": "2025-04-15T09:11:57.546360Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmtqb5ybwag2", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "99c89ee4-48c2-4d82-a081-382815840b52", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmtqb5ybwag2"}, {"timestamp": "2025-04-15T11:34:29.204Z", "date_only": false, "value": "2025-04-15T11:34:29.204662Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmty7iug4og2", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "d85ef7e8-f46e-4eb3-8afa-b9303ac85c83", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmty7iug4og2"}, {"timestamp": "2025-04-15T18:32:23.619Z", "date_only": false, "value": "2025-04-15T18:32:23.619794Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmuognnw73x2", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "282de970-3f30-41c3-a5b0-e56c3503a178", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmuognnw73x2"}, {"timestamp": "2025-04-16T08:54:07.533Z", "date_only": false, "value": "2025-04-16T08:54:07.533662Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmw7qiueis32", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "102d0a35-75da-4e8d-a0c9-81a8ef859090", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lmw7qiueis32"}, {"timestamp": "2025-04-16T16:58:18Z", "date_only": false, "value": "2025-04-16T16:58:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/rHz0d/15", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "0cfc7b12-804d-4b91-8c92-d0cfbe575257", "content": "deface tutorial with CVE-2025-3102 on yt tonight", "url": "https://t.me/rHz0d/15"}, {"timestamp": "2025-04-16T17:11:00Z", "date_only": false, "value": "2025-04-16T17:11:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/rHz0d/16", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "9d29e581-31e1-4827-8109-a4f7d9713f97", "content": "\ud83d\udd10 HOW to DEFACE using CVE-2025-3102\n\nhttps://youtu.be/zCqgVjbIQuc\n\nenjoy, questions @rHz0day", "url": "https://t.me/rHz0d/16"}, {"timestamp": "2025-04-16T19:10:44Z", "date_only": false, "value": "2025-04-16T19:10:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UlWNd2CR3jGZxvVFGVDjJz1c1thleXP8-jCnAfYOo8Kc_pA", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "feaee3c5-2597-4b2b-8175-7ae5fbe7d23b"}, {"timestamp": "2025-04-18T11:27:59Z", "date_only": false, "value": "2025-04-18T11:27:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/32687", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "1ba11026-fd6b-4e93-90f9-10e1d3b2b5b2", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aEXPLOIT CVE-2025-3102 \nURL\uff1ahttps://github.com/itsismarcos/vanda-CVE-2025-3102\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/32687"}, {"timestamp": "2025-04-21T09:00:07Z", "date_only": false, "value": "2025-04-21T09:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hLS-BbIPUB3i27D5KHxBUQyxrR1zGhnGwzCb4We66ityBOg", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "6ea49b33-9401-49cb-9a74-4f51825d8389"}, {"timestamp": "2025-05-07T19:00:09Z", "date_only": false, "value": "2025-05-07T19:00:09.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/7019", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "200cf4aa-89ce-44a8-b136-4baa984d78cf", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0438\u043b\u043e\u0441\u044c \u043d\u0430 \u0432\u0442\u043e\u0440\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 OttoKit \u0434\u043b\u044f WordPress \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0430\u0439\u0442\u043e\u0432 WordPress.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Defiant \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OttoKit, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0430 \u043c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0447\u0435\u0440\u0435\u0437 \u043c\u0435\u0441\u044f\u0446 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0431\u044b\u043b\u0438 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u044b \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u041f\u043b\u0430\u0433\u0438\u043d OttoKit: All-in-One Automation Platform (\u0440\u0430\u043d\u0435\u0435 SureTriggers), \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0431\u043e\u043b\u0435\u0435 100 000 \u0440\u0430\u0437, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0434\u0430\u0447, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0438\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b.\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0430\u043f\u0440\u0435\u043b\u044f \u0431\u044b\u043b\u0430 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-3102\u00a0- \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u0438 \u043d\u0435\u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 OttoKit, - \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 Defiant \u043e\u0431\u0440\u0430\u0449\u0430\u0435\u0442 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043d\u043e\u0432\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435, CVE-2025-27007 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0430\u0439\u0442\u0430\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 create_wp_connection(), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e, \u0447\u0442\u043e\u0431\u044b \u0441\u0430\u0439\u0442 \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u043b \u0438 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0430 OttoKit/SureTriggers \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u043b\u0441\u044f \u043a \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u0440\u043e\u043b\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u0412 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0434\u0430\u0436\u0435 \u043d\u0435 \u0437\u043d\u0430\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0441\u0430\u0439\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0436\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u043b\u0438\u0441\u044c \u043a \u043f\u043b\u0430\u0433\u0438\u043d\u0443 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0430\u0440\u043e\u043b\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439.", "url": "https://t.me/true_secator/7019"}, {"timestamp": "2025-05-07T19:36:50.550Z", "date_only": false, "value": "2025-05-07T19:36:50.550187Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lom5hfmr4l23", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "eec7155c-cedb-4960-8e40-ca2824067021", "url": "https://bsky.app/profile/redteamnews.bsky.social/post/3lom5hfmr4l23"}, {"timestamp": "2025-05-13T16:01:34Z", "date_only": false, "value": "2025-05-13T16:01:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "a93459a8-4371-4f44-ab11-21cd8c3f80af", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_suretriggers_auth_bypass.rb"}, {"timestamp": "2025-05-14T21:02:27.520Z", "date_only": false, "value": "2025-05-14T21:02:27.520351Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lp5vioqbrh2n", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "48e86ffb-6ad8-48dc-a184-c23bdaa5393c", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lp5vioqbrh2n"}, {"timestamp": "2025-05-21T15:02:26Z", "date_only": false, "value": "2025-05-21T15:02:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/rHz0d/7", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "5174f57f-419a-488b-83cc-bbb8cdccb837", "content": "\ud83d\udd10 CVE-2025-3102 \u2013 Authentication Bypass in SureTriggers WordPress Plugin\n\n\ud83d\udea8 CVE-2025-3102 is a critical authentication bypass vulnerability affecting the SureTriggers: All-in-One Automation Platform WordPress plugin, which is actively installed on over 100,000 websites. Due to the nature of the flaw and the scale of deployment, this vulnerability poses a significant security risk.\n\nDork : intitle:\"SureTriggers\" inurl:\"/wp-content/plugins/suretriggers\"\n\nhttps://github.com/rhz0d/CVE-2025-3102/\n\nenjoy", "url": "https://t.me/rHz0d/7"}, {"timestamp": "2025-05-26T10:35:25Z", "date_only": false, "value": "2025-05-26T10:35:25.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-3102.yaml", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "d4c42596-bfb3-42f4-9486-c6072a8df47a", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-3102.yaml"}, {"timestamp": "2025-05-27T21:02:17.811Z", "date_only": false, "value": "2025-05-27T21:02:17.811636Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lq6lkkzoei24", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "8e45d229-b43d-4a83-ae4e-60bd74b9c85c", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lq6lkkzoei24"}, {"timestamp": "2025-06-03T15:00:07Z", "date_only": false, "value": "2025-06-03T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/S3luyvJ2R7xCTSLpSlkUyEdAxTgE_nQEIWaJA9giiuBhhRI", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "67f89680-2bad-47d1-8382-cf4fff987f92"}, {"timestamp": "2025-06-04T03:00:07Z", "date_only": false, "value": "2025-06-04T03:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZZSMGR1oNbSq10JiyVgjm46BE0NUVhN8HJco1HY--mJtk-o", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "832a3a40-cf8e-40a1-b12d-87e074c8a6a0"}, {"timestamp": "2025-06-05T18:35:35Z", "date_only": false, "value": "2025-06-05T18:35:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/39389", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "8cd59aa3-66a0-4729-9338-3b645a19f7d0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udd10 CVE-2025-3102 \u2013 Authentication Bypass in SureTriggers WordPress Plugin\nURL\uff1ahttps://github.com/B1ack4sh/CVE-2025-3102\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/39389"}, {"timestamp": "2025-06-05T21:00:06Z", "date_only": false, "value": "2025-06-05T21:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BL_e4Pn2XWXBMx9wZEPrIGi745f5BxsRycAwQ7vbPIRX9mY", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "9bf6e0dd-d331-4a53-b219-31a494b1710a"}, {"timestamp": "2025-06-06T20:33:23Z", "date_only": false, "value": "2025-06-06T20:33:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/39519", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "76045fce-9ecd-41fe-974d-a7c56ccefcbe", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aThe SureTriggers WordPress plugin contains a critical authentication bypass vulnerability (CVE-2025-3102) that affects all versions up to and including 1.0.78.\nURL\uff1ahttps://github.com/baribut/CVE-2025-3102\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/39519"}, {"timestamp": "2025-06-07T03:00:07Z", "date_only": false, "value": "2025-06-07T03:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/t2mOu0CqYZ5qLLxESiGoH_sUvRUlHAHlqkD_UKh-Uep6sL0", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "84328bc6-37d4-4390-b44c-22b4f1266cb7"}, {"timestamp": "2025-06-23T08:22:33Z", "date_only": false, "value": "2025-06-23T08:22:33+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-3102", "field": "timestamps.asserted_at", "uuid": "e8895476-e0cb-45bc-8122-8fefe77c7b1a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-23T08:22:33Z", "date_only": false, "value": "2025-06-23T08:22:33+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-3102", "field": "timestamps.first_seen_at", "uuid": "e8895476-e0cb-45bc-8122-8fefe77c7b1a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-24T00:00:00Z", "date_only": false, "value": "2025-06-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-24)", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "c69ef89b-5b03-4748-8d0c-8d943c98e3fc"}, {"timestamp": "2025-07-02T13:15:39Z", "date_only": false, "value": "2025-07-02T13:15:39.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2025-3102", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-08-03T21:02:39.908Z", "date_only": false, "value": "2025-08-03T21:02:39.908221Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlbuzaqn2n", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "71d2e774-9802-4c97-b143-a331fb8dc027", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlbuzaqn2n"}, {"timestamp": "2025-08-09T17:25:37Z", "date_only": false, "value": "2025-08-09T17:25:37.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "56574b9f-e20e-41e2-af76-02a33a077f46"}, {"timestamp": "2025-09-10T07:00:38Z", "date_only": false, "value": "2025-09-10T07:00:38.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "39ea5f5a-1dfe-49a4-83c1-e9a321f54a33"}, {"timestamp": "2025-10-23T21:13:04Z", "date_only": false, "value": "2025-10-23T21:13:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "f153b0f4-8770-4200-803f-e8dc3592d2a0"}, {"timestamp": "2026-02-15T00:00:00Z", "date_only": false, "value": "2026-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-15)", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "2b638788-b869-40c7-b98a-ebbe72646691"}, {"timestamp": "2026-04-08T17:31:20.420Z", "date_only": false, "value": "2026-04-08T17:31:20.420Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-3102", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T17:31:20.420Z", "date_only": false, "value": "2026-04-08T17:31:20.420Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2025-3102", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T09:19:11.363Z", "date_only": false, "value": "2026-06-17T09:19:11.363", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3102", "record": "FKIE_CVE-2025-3102", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:22.768Z", "date_only": false, "value": "2026-06-19T12:46:22.768365Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7ae36af5-15df-4317-be16-31eac3e9392f", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "82656b39-d760-4321-9f23-67a4485565c5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7ae36af5-15df-4317-be16-31eac3e9392f"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-3102", "field": "timestamps.recorded_at", "uuid": "289c84bf-367b-478d-a58d-390f3c0a2831", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:12:53.927Z", "date_only": false, "value": "2026-06-23T11:12:53.927989Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/289c84bf-367b-478d-a58d-390f3c0a2831", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "d174f652-20c1-49dd-a78a-aa99b0a5a094", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/289c84bf-367b-478d-a58d-390f3c0a2831"}, {"timestamp": "2026-06-23T14:04:04.327Z", "date_only": false, "value": "2026-06-23T14:04:04.327446Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a1a65000-2f16-473a-a484-547c5d5f53ce", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "8ad913a0-b5e5-4193-a452-588c7b48a3ee", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a1a65000-2f16-473a-a484-547c5d5f53ce"}, {"timestamp": "2026-06-30T09:23:52.270Z", "date_only": false, "value": "2026-06-30T09:23:52.270249Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/49d13cbd-29c0-49bf-8ae2-ab44bd97e4c8", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "394f297c-1061-4c51-aef0-366cabf07064", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/49d13cbd-29c0-49bf-8ae2-ab44bd97e4c8"}, {"timestamp": "2026-07-01T07:18:07.990Z", "date_only": false, "value": "2026-07-01T07:18:07.990068Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e8895476-e0cb-45bc-8122-8fefe77c7b1a", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "e3737c74-a7e8-47b4-a90c-2749f01e7344", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/e8895476-e0cb-45bc-8122-8fefe77c7b1a"}, {"timestamp": "2026-07-15T10:15:08.820Z", "date_only": false, "value": "2026-07-15T10:15:08.820394Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-14)", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "16f1ec70-a782-44de-8537-2a69abe72ac0"}, {"timestamp": "2026-07-20T22:00:03.758Z", "date_only": false, "value": "2026-07-20T22:00:03.758731Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/305", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "f52dcffc-0d79-4b54-896c-c1abd1610d68", "url": "https://t.me/pphm_HackerNews/305"}, {"timestamp": "2026-07-21T00:00:10.140Z", "date_only": false, "value": "2026-07-21T00:00:10.140061Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/305", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "1c1e6551-eb27-4fea-8fd8-c49cda0789e8", "url": "https://t.me/pphm_HackerNews/305"}, {"timestamp": "2026-07-25T15:00:14.161Z", "date_only": false, "value": "2026-07-25T15:00:14.161661Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/473", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "5372910e-ded0-44a8-8ae2-a91f460f011d", "url": "https://t.me/ZerodayAlert/473"}, {"timestamp": "2026-07-26T00:00:28.861Z", "date_only": false, "value": "2026-07-26T00:00:28.861054Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/473", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "dff6951c-da3d-46db-92aa-c45d1073b694", "url": "https://t.me/ZerodayAlert/473"}, {"timestamp": "2026-08-14T16:00:18.049Z", "date_only": false, "value": "2026-08-14T16:00:18.049502Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/516", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "9c19d6d7-4145-4011-881f-a7209718c8e9", "url": "https://t.me/purp_sec/516"}, {"timestamp": "2026-09-06T00:00:00Z", "date_only": false, "value": "2026-09-06T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-3102", "field": "timestamps.last_seen_at", "uuid": "e8895476-e0cb-45bc-8122-8fefe77c7b1a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-06T00:00:00Z", "date_only": true, "value": "2026-09-06", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-3102", "field": "evidence.0.details.observation_date", "uuid": "e8895476-e0cb-45bc-8122-8fefe77c7b1a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-06T00:00:00Z", "date_only": false, "value": "2026-09-06T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-3102", "field": "status.status_updated_at", "uuid": "e8895476-e0cb-45bc-8122-8fefe77c7b1a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-08T01:00:01Z", "date_only": false, "value": "2026-09-08T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-3102", "field": "timestamps.recorded_at", "uuid": "e8895476-e0cb-45bc-8122-8fefe77c7b1a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-23T19:00:17Z", "date_only": false, "value": "2026-09-23T19:00:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EPvRU5kPE9DGa22FTBrFM-4gS1PfrHxWJuXh_5zrnWGkiPk", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "7fab7958-2fc6-4866-b828-4c8a7ad9af6e"}, {"timestamp": "2026-09-23T19:00:17Z", "date_only": false, "value": "2026-09-23T19:00:17.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/EPvRU5kPE9DGa22FTBrFM-4gS1PfrHxWJuXh_5zrnWGkiPk", "record": "CVE-2025-3102", "field": "creation_timestamp", "uuid": "c8303db0-d66f-4634-a6e1-2779a86f20db"}]}