{"metadata": {"vulnerability": "CVE-2025-3439", "count": 24, "kinds": {"milestone": 4, "sighting": 11, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-04-08T00:43:09.396Z", "date_only": false, "value": "2025-04-08T00:43:09.396Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-3439", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-10T00:00:00Z", "date_only": false, "value": "2025-04-10T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / Wordfence", "record": "CVE-2025-3439", "field": "containers.cna.timeline.0.time", "text": "Disclosed"}, {"timestamp": "2025-04-11T12:42:23.783Z", "date_only": false, "value": "2025-04-11T12:42:23.783Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-3439", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-04-11T13:15:41Z", "date_only": false, "value": "2025-04-11T13:15:41Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JQ7G-H856-CCPG", "record": "GHSA-JQ7G-H856-CCPG", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-04-11T13:15:41.100Z", "date_only": false, "value": "2025-04-11T13:15:41.100", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3439", "record": "FKIE_CVE-2025-3439", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-04-11T13:18:51.797Z", "date_only": false, "value": "2025-04-11T13:18:51.797406Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-3439", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-11T13:18:51.797Z", "date_only": false, "value": "2025-04-11T13:18:51.797406Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3439", "record": "FKIE_CVE-2025-3439", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-04-11T13:19:06.177Z", "date_only": false, "value": "2025-04-11T13:19:06.177Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-3439", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-11T15:32:29Z", "date_only": false, "value": "2025-04-11T15:32:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JQ7G-H856-CCPG", "record": "GHSA-JQ7G-H856-CCPG", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-04-11T15:32:29Z", "date_only": false, "value": "2025-04-11T15:32:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JQ7G-H856-CCPG", "record": "GHSA-JQ7G-H856-CCPG", "field": "modified", "linked_record": true}, {"timestamp": "2025-04-11T15:37:58.972Z", "date_only": false, "value": "2025-04-11T15:37:58.972117Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmkdyc6bpr2i", "record": "CVE-2025-3439", "field": "creation_timestamp", "uuid": "ca5651c0-b462-4445-9343-70a6a8708ae0", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmkdyc6bpr2i"}, {"timestamp": "2025-04-11T15:48:41.543Z", "date_only": false, "value": "2025-04-11T15:48:41.543902Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114320115017132840", "record": "CVE-2025-3439", "field": "creation_timestamp", "uuid": "27a9d04e-16d4-4e68-a1c5-6e4d94d6b296", "url": "https://mastodon.social/users/CyberSignaler/statuses/114320115017132840"}, {"timestamp": "2025-04-11T16:27:11Z", "date_only": false, "value": "2025-04-11T16:27:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/22745", "record": "CVE-2025-3439", "field": "creation_timestamp", "uuid": "01cf161a-9a55-4b0c-951b-bb1968e9e169", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3439 - Everest Forms WordPress PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3439 \nPublished : April 11, 2025, 1:15 p.m. | 28\u00a0minutes ago \nDescription : The Everest Forms \u2013 Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.1 via deserialization of untrusted input from the 'field_value' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/22745"}, {"timestamp": "2025-04-14T21:47:14.800Z", "date_only": false, "value": "2025-04-14T21:47:14.800189Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmsjzfiic22w", "record": "CVE-2025-3439", "field": "creation_timestamp", "uuid": "68084dab-5aa5-43f0-8809-efc9a9f7cdbe", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmsjzfiic22w"}, {"timestamp": "2025-08-09T13:26:57Z", "date_only": false, "value": "2025-08-09T13:26:57.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "record": "CVE-2025-3439", "field": "creation_timestamp", "uuid": "d07072a6-c4a9-42b4-bd65-a39571957c94"}, {"timestamp": "2025-08-11T18:47:43Z", "date_only": false, "value": "2025-08-11T18:47:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "record": "CVE-2025-3439", "field": "creation_timestamp", "uuid": "2cb367b6-f509-4cdf-a1d2-1e147daf86f1"}, {"timestamp": "2026-04-08T16:35:26.840Z", "date_only": false, "value": "2026-04-08T16:35:26.840Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-3439", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T16:35:26.840Z", "date_only": false, "value": "2026-04-08T16:35:26.840Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2025-3439", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T09:19:57.693Z", "date_only": false, "value": "2026-06-17T09:19:57.693", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3439", "record": "FKIE_CVE-2025-3439", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-09T03:00:08.550Z", "date_only": false, "value": "2026-07-09T03:00:08.550219Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1766", "record": "CVE-2025-3439", "field": "creation_timestamp", "uuid": "e70eb481-23f2-4db3-b075-b89bf39e1e86", "url": "https://t.me/brutsecurity/1766"}, {"timestamp": "2026-07-10T00:00:32.087Z", "date_only": false, "value": "2026-07-10T00:00:32.087473Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1766", "record": "CVE-2025-3439", "field": "creation_timestamp", "uuid": "ba1963b9-ef5f-49c0-bbbf-f41db73795c4", "url": "https://t.me/brutsecurity/1766"}, {"timestamp": "2026-07-11T13:00:05.248Z", "date_only": false, "value": "2026-07-11T13:00:05.248915Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1766", "record": "CVE-2025-3439", "field": "creation_timestamp", "uuid": "77dfde25-12b9-4120-9034-fd7ef8588ab5", "url": "https://t.me/brutsecurity/1766", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-12T00:00:48.749Z", "date_only": false, "value": "2026-07-12T00:00:48.749014Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1766", "record": "CVE-2025-3439", "field": "creation_timestamp", "uuid": "6bbf8c42-68aa-4d84-a182-6b95f9a188fc", "url": "https://t.me/brutsecurity/1766", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-14T16:00:18.313Z", "date_only": false, "value": "2026-08-14T16:00:18.313814Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/504", "record": "CVE-2025-3439", "field": "creation_timestamp", "uuid": "f33d92f0-d9b2-4db2-b991-38728f02e299", "url": "https://t.me/purp_sec/504"}], "metrics": {"as_of": "2026-11-13T13:16:55.572Z", "anchors": {"origin": {"timestamp": "2025-04-11T12:42:23.783Z", "date_only": false, "value": "2025-04-11T12:42:23.783Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-3439", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-04-11T12:42:23.783Z", "date_only": false, "value": "2025-04-11T12:42:23.783Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-3439", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-07-11T13:00:05.248Z", "date_only": false, "value": "2026-07-11T13:00:05.248915Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1766", "record": "CVE-2025-3439", "field": "creation_timestamp", "uuid": "77dfde25-12b9-4120-9034-fd7ef8588ab5", "url": "https://t.me/brutsecurity/1766", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 39399461.465, "hours": 10944.29485138889, "days": 456.01228547453707, "min_seconds": 39399461.465, "max_seconds": 39399461.465, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-11T12:42:23.783Z", "date_only": false, "value": "2025-04-11T12:42:23.783Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-3439", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-11T13:00:05.248Z", "date_only": false, "value": "2026-07-11T13:00:05.248915Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1766", "record": "CVE-2025-3439", "field": "creation_timestamp", "uuid": "77dfde25-12b9-4120-9034-fd7ef8588ab5", "url": "https://t.me/brutsecurity/1766", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 50200471.789891, "hours": 13944.575497191943, "days": 581.0239790496643, "min_seconds": 50200471.789891, "max_seconds": 50200471.789891, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-11T12:42:23.783Z", "date_only": false, "value": "2025-04-11T12:42:23.783Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-3439", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T13:16:55.572Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 10801010.324891, "hours": 3000.2806458030554, "days": 125.01169357512731, "min_seconds": 10801010.324891, "max_seconds": 10801010.324891, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-11T13:00:05.248Z", "date_only": false, "value": "2026-07-11T13:00:05.248915Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1766", "record": "CVE-2025-3439", "field": "creation_timestamp", "uuid": "77dfde25-12b9-4120-9034-fd7ef8588ab5", "url": "https://t.me/brutsecurity/1766", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-13T13:16:55.572Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}