{"metadata": {"vulnerability": "cve-2024-13528", "count": 19, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-01-17T23:24:53.274Z", "date_only": false, "value": "2025-01-17T23:24:53.274Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-13528", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2024-13528", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-02-12T09:22:47.776Z", "date_only": false, "value": "2025-02-12T09:22:47.776Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-13528", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-02-12T09:58:17.036Z", "date_only": false, "value": "2025-02-12T09:58:17.036200Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113990323173619602", "record": "CVE-2024-13528", "field": "creation_timestamp", "uuid": "6513380e-38de-4376-a153-1aa9fed64779", "url": "https://infosec.exchange/users/cve/statuses/113990323173619602"}, {"timestamp": "2025-02-12T10:15:12Z", "date_only": false, "value": "2025-02-12T10:15:12Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FFHX-9G94-W22W", "record": "GHSA-FFHX-9G94-W22W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-02-12T10:15:12.130Z", "date_only": false, "value": "2025-02-12T10:15:12.130", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-13528", "record": "FKIE_CVE-2024-13528", "field": "published"}, {"timestamp": "2025-02-12T10:16:10.871Z", "date_only": false, "value": "2025-02-12T10:16:10.871111Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwxjn45p2x", "record": "CVE-2024-13528", "field": "creation_timestamp", "uuid": "a63e6aaf-5481-4d08-8e2e-4fc6dc64802c", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwxjn45p2x"}, {"timestamp": "2025-02-12T11:10:45Z", "date_only": false, "value": "2025-02-12T11:10:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4068", "record": "CVE-2024-13528", "field": "creation_timestamp", "uuid": "6a8f59a7-6fc8-46f0-80d5-d79a00d11d8f", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13528\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T10:15:12.130\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/emails-verification-for-woocommerce/tags/2.9.2/includes/class-alg-wc-ev-emails.php#L151\n2. https://plugins.trac.wordpress.org/changeset/3238136/\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/0b3798e3-45fe-4829-9012-dc728d4af87f?source=cve", "url": "https://t.me/DarkWebInformer_CVEAlerts/4068"}, {"timestamp": "2025-02-12T12:30:47Z", "date_only": false, "value": "2025-02-12T12:30:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FFHX-9G94-W22W", "record": "GHSA-FFHX-9G94-W22W", "field": "published"}, {"timestamp": "2025-02-12T12:30:47Z", "date_only": false, "value": "2025-02-12T12:30:47Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FFHX-9G94-W22W", "record": "GHSA-FFHX-9G94-W22W", "field": "modified"}, {"timestamp": "2025-02-12T12:41:39Z", "date_only": false, "value": "2025-02-12T12:41:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/17838", "record": "CVE-2024-13528", "field": "creation_timestamp", "uuid": "ead8ef04-e4d9-49f1-b7c4-178993f19db5", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13528 - WooCommerce WordPress Customer Email Verification Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-13528 \nPublished : Feb. 12, 2025, 10:15 a.m. | 37\u00a0minutes ago \nDescription : The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.9.5. This is due to the presence of a shortcode that will generate a confirmation link with a placeholder email. This makes it possible for authenticated attackers, with Contributor-level access and above, to generate a verification link for any unverified user and log into the account. The 'Fine tune placement' option must be enabled in the plugin settings in order to exploit the vulnerability. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/17838"}, {"timestamp": "2025-02-12T13:11:27Z", "date_only": false, "value": "2025-02-12T13:11:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4094", "record": "CVE-2024-13528", "field": "creation_timestamp", "uuid": "e5b09b66-54e9-4988-ba8e-d7e10dfc27f2", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13528\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.9.5. This is due to the presence of a shortcode that will generate a confirmation link with a placeholder email. This makes it possible for authenticated attackers, with Contributor-level access and above, to generate a verification link for any unverified user and log into the account. The 'Fine tune placement' option must be enabled in the plugin settings in order to exploit the vulnerability.\n\ud83d\udccf Published: 2025-02-12T12:30:47Z\n\ud83d\udccf Modified: 2025-02-12T12:30:47Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-13528\n2. https://plugins.trac.wordpress.org/browser/emails-verification-for-woocommerce/tags/2.9.2/includes/class-alg-wc-ev-emails.php#L151\n3. https://plugins.trac.wordpress.org/changeset/3238136\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/0b3798e3-45fe-4829-9012-dc728d4af87f?source=cve", "url": "https://t.me/DarkWebInformer_CVEAlerts/4094"}, {"timestamp": "2025-02-12T14:20:30.355Z", "date_only": false, "value": "2025-02-12T14:20:30.355568Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhyemcnecv2w", "record": "CVE-2024-13528", "field": "creation_timestamp", "uuid": "cd7dde6d-8196-4096-b47a-83f5d1762b4e", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhyemcnecv2w"}, {"timestamp": "2025-02-12T14:37:39.130Z", "date_only": false, "value": "2025-02-12T14:37:39.130792Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-13528", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-12T14:37:39.130Z", "date_only": false, "value": "2025-02-12T14:37:39.130792Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-13528", "record": "FKIE_CVE-2024-13528", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-12T14:38:45.364Z", "date_only": false, "value": "2025-02-12T14:38:45.364Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-13528", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-08T16:34:49.661Z", "date_only": false, "value": "2026-04-08T16:34:49.661Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-13528", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T16:34:49.661Z", "date_only": false, "value": "2026-04-08T16:34:49.661Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "cve-2024-13528", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:02:11.893Z", "date_only": false, "value": "2026-06-17T07:02:11.893", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-13528", "record": "FKIE_CVE-2024-13528", "field": "lastModified"}]}