{"metadata": {"vulnerability": "cve-2024-11349", "count": 17, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-11-18T16:47:22.199Z", "date_only": false, "value": "2024-11-18T16:47:22.199Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-11349", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-12-20T00:00:00Z", "date_only": false, "value": "2024-12-20T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2024-11349", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2024-12-21T04:22:17.791Z", "date_only": false, "value": "2024-12-21T04:22:17.791Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-11349", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-12-21T04:32:10.361Z", "date_only": false, "value": "2024-12-21T04:32:10.361288Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113688938401502566", "record": "CVE-2024-11349", "field": "creation_timestamp", "uuid": "8b37e209-d36c-4ded-a7f0-a44621a8b52f", "url": "https://infosec.exchange/users/cve/statuses/113688938401502566"}, {"timestamp": "2024-12-21T05:15:07Z", "date_only": false, "value": "2024-12-21T05:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2RMV-3Q59-R6G3", "record": "GHSA-2RMV-3Q59-R6G3", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-12-21T05:15:07.017Z", "date_only": false, "value": "2024-12-21T05:15:07.017", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-11349", "record": "FKIE_CVE-2024-11349", "field": "published"}, {"timestamp": "2024-12-21T05:15:30.548Z", "date_only": false, "value": "2024-12-21T05:15:30.548718Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lds5h3c6q222", "record": "CVE-2024-11349", "field": "creation_timestamp", "uuid": "a8d5c939-34c6-4428-b1e7-17ab32818a46", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lds5h3c6q222"}, {"timestamp": "2024-12-21T06:30:43Z", "date_only": false, "value": "2024-12-21T06:30:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2RMV-3Q59-R6G3", "record": "GHSA-2RMV-3Q59-R6G3", "field": "published"}, {"timestamp": "2024-12-21T06:30:43Z", "date_only": false, "value": "2024-12-21T06:30:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2RMV-3Q59-R6G3", "record": "GHSA-2RMV-3Q59-R6G3", "field": "modified"}, {"timestamp": "2024-12-21T06:58:13Z", "date_only": false, "value": "2024-12-21T06:58:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/13476", "record": "CVE-2024-11349", "field": "creation_timestamp", "uuid": "359320db-f2e5-457a-abc6-3e855fc60288", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-11349 - \"AdForest WordPress Authentication Bypass Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-11349 \nPublished : Dec. 21, 2024, 5:15 a.m. | 36\u00a0minutes ago \nDescription : The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. This is due to the plugin not properly verifying a user's identity prior to authenticating them through the sb_login_user_with_otp_fun() function. This makes it possible for unauthenticated attackers to log in as arbitrary users, including administrators. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/13476"}, {"timestamp": "2024-12-23T13:00:48Z", "date_only": false, "value": "2024-12-23T13:00:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/9571", "record": "CVE-2024-11349", "field": "creation_timestamp", "uuid": "a83f576b-92d2-474b-ab34-678dfd34b759", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-11349: Authentication Bypass Using an Alternate Path or Channel (CWE-288)\nURL\uff1ahttps://github.com/linunyang/CVE-2024-11349\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/9571"}, {"timestamp": "2024-12-23T16:43:21.405Z", "date_only": false, "value": "2024-12-23T16:43:21.405263Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-11349", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-12-23T16:43:21.405Z", "date_only": false, "value": "2024-12-23T16:43:21.405263Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-11349", "record": "FKIE_CVE-2024-11349", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-12-28T00:51:22.860Z", "date_only": false, "value": "2024-12-28T00:51:22.860Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-11349", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-08T17:32:53.748Z", "date_only": false, "value": "2026-04-08T17:32:53.748Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-11349", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T17:32:53.748Z", "date_only": false, "value": "2026-04-08T17:32:53.748Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "cve-2024-11349", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:57:35.623Z", "date_only": false, "value": "2026-06-17T06:57:35.623", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-11349", "record": "FKIE_CVE-2024-11349", "field": "lastModified"}]}
