{"metadata": {"vulnerability": "cve-2024-4295", "count": 36, "kinds": {"milestone": 4, "sighting": 20, "kev": 0, "other": 12}}, "data": [{"timestamp": "2024-04-27T17:06:34.258Z", "date_only": false, "value": "2024-04-27T17:06:34.258Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-4295", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-04-28T05:02:06.068Z", "date_only": false, "value": "2024-04-28T05:02:06.068263Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-4295", "record": "GSD-2024-4295", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-30T00:00:00Z", "date_only": false, "value": "2024-04-30T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2024-4295", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2024-06-04T00:00:00Z", "date_only": false, "value": "2024-06-04T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2024-4295", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2024-06-05T05:33:05.595Z", "date_only": false, "value": "2024-06-05T05:33:05.595Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-4295", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-06-05T06:15:12Z", "date_only": false, "value": "2024-06-05T06:15:12Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M47J-H8WJ-CG29", "record": "GHSA-M47J-H8WJ-CG29", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-06-05T06:15:12.007Z", "date_only": false, "value": "2024-06-05T06:15:12.007", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4295", "record": "FKIE_CVE-2024-4295", "field": "published"}, {"timestamp": "2024-06-05T06:30:40Z", "date_only": false, "value": "2024-06-05T06:30:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M47J-H8WJ-CG29", "record": "GHSA-M47J-H8WJ-CG29", "field": "published"}, {"timestamp": "2024-06-05T10:32:04Z", "date_only": false, "value": "2024-06-05T10:32:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7530", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "072e029e-15ba-4e26-82a9-eaeed42e0c12", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-4295 Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash\nURL\uff1ahttps://github.com/truonghuuphuc/CVE-2024-4295-Poc\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7530"}, {"timestamp": "2024-06-05T14:20:47.482Z", "date_only": false, "value": "2024-06-05T14:20:47.482540Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-4295", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-06-05T14:20:47.482Z", "date_only": false, "value": "2024-06-05T14:20:47.482540Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4295", "record": "FKIE_CVE-2024-4295", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-05T14:20:59.349Z", "date_only": false, "value": "2024-06-05T14:20:59.349Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-4295", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-06T17:36:36Z", "date_only": false, "value": "2024-06-06T17:36:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/1803", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "223dc362-5a8d-4e65-a396-042c403d1cea", "content": "\u200aCVE-2024-4295: Critical Vulnerability in Popular WordPress Plugin Exposes 90K+ Sites\n\nhttps://securityonline.info/cve-2024-4295-critical-vulnerability-in-popular-wordpress-plugin-exposes-90k-sites/", "url": "https://t.me/HackingInsights/1803"}, {"timestamp": "2024-08-01T20:33:53.096Z", "date_only": false, "value": "2024-08-01T20:33:53.096Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-4295", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-30T06:52:02Z", "date_only": false, "value": "2024-08-30T06:52:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1554", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "37f796ad-ea2c-49d0-89f0-ced96411465d", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1554"}, {"timestamp": "2024-08-31T12:29:12Z", "date_only": false, "value": "2024-08-31T12:29:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XpvaFCWqDdhczMpL78DIu7UwbRt1BfqFLpK3OfazzKgSSlAyeg", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "26de8d34-e12a-4be1-a9f3-8335a3e62988"}, {"timestamp": "2024-08-31T12:42:28Z", "date_only": false, "value": "2024-08-31T12:42:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3v_L1Km8kHglM99z9Gx-p2lsvnYIaRU3JVXDXxZhsRyM6xs7", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "9f466b93-bcef-4927-b4ff-1b82cc512e75"}, {"timestamp": "2024-08-31T13:09:22Z", "date_only": false, "value": "2024-08-31T13:09:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1580", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "8ca9da42-d116-4406-bfc2-94ffbc13c722", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1580"}, {"timestamp": "2024-09-02T21:35:26Z", "date_only": false, "value": "2024-09-02T21:35:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/leak503/506", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "25bb10a5-26d8-4bb1-b4ff-52acea05830f", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/leak503/506"}, {"timestamp": "2024-09-07T05:42:04Z", "date_only": false, "value": "2024-09-07T05:42:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1520", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "2315c1f2-1e85-48cc-88f2-c31ab494d33d", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1520"}, {"timestamp": "2024-09-07T05:42:04Z", "date_only": false, "value": "2024-09-07T05:42:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1531", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "61420373-e63a-42ca-b915-4d52773cc006", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1531"}, {"timestamp": "2024-09-07T16:14:23Z", "date_only": false, "value": "2024-09-07T16:14:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/454", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "648b6d48-63b2-4854-83eb-470de23a3994", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/ton618cyber/454"}, {"timestamp": "2024-09-13T16:57:01Z", "date_only": false, "value": "2024-09-13T16:57:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1602", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "6a58dcab-e2c9-4229-b3c8-6a3c82d6f390", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1602"}, {"timestamp": "2024-10-18T12:25:41Z", "date_only": false, "value": "2024-10-18T12:25:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1615", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "0153919c-5814-48d2-af85-1086883eec62", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1615"}, {"timestamp": "2024-10-18T12:26:48Z", "date_only": false, "value": "2024-10-18T12:26:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/74IzvRfHv6As3hyVMCWy5rx44qm1MKm9hZLdVsqv0WV9bgP1", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "9e542698-9079-4a7e-8e72-aecb006bcfe0"}, {"timestamp": "2024-11-12T20:45:56Z", "date_only": false, "value": "2024-11-12T20:45:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackerInvestigationZone/9", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "cdef2bc8-ee90-4fa9-8aa2-31c50f61cb54", "content": "\ud83d\udea8_CvEploiterv2 x xWPv3 Ultimate/Beast Software\n\n\ud83c\udfafThe most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n\u00a0\u00a0\u00a0\u00a0 with the latest version/method.]\n\n\u2699\ufe0fCVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n \u2699\ufe0fCVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n\u2699\ufe0fCVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n\u2699\ufe0fCVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n\u2699\ufe0fCVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n\u2699\ufe0f#CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n\u2699\ufe0fCVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n\u2699\ufe0fCVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n\u2699\ufe0fCVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\n#Investigation_of_hacking \n#Cyber_Security_News\n#codeb0ss", "url": "https://t.me/HackerInvestigationZone/9"}, {"timestamp": "2024-11-30T13:27:14Z", "date_only": false, "value": "2024-11-30T13:27:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1634", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "d0568759-3e04-4d6d-b5b9-3c66e1f8dcaa", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1634"}, {"timestamp": "2024-12-18T18:01:34Z", "date_only": false, "value": "2024-12-18T18:01:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1653", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "305c2dd9-6a10-4bb2-b4d0-c0d4ddb4bad3", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1653"}, {"timestamp": "2025-03-16T00:41:48Z", "date_only": false, "value": "2025-03-16T00:41:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyber_hsecurity/3301", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "a0095367-a85f-48f6-ab93-94fe4cc0b33c", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/cyber_hsecurity/3301"}, {"timestamp": "2025-04-24T21:02:18.290Z", "date_only": false, "value": "2025-04-24T21:02:18.290827Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnlm67sygs2t", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "55150bf9-051f-4dc3-bec1-89b66286d806", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnlm67sygs2t"}, {"timestamp": "2026-04-08T16:57:28.398Z", "date_only": false, "value": "2026-04-08T16:57:28.398Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-4295", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T16:57:28.398Z", "date_only": false, "value": "2026-04-08T16:57:28.398Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "cve-2024-4295", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-08T18:33:19Z", "date_only": false, "value": "2026-04-08T18:33:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M47J-H8WJ-CG29", "record": "GHSA-M47J-H8WJ-CG29", "field": "modified"}, {"timestamp": "2026-06-17T08:01:37.163Z", "date_only": false, "value": "2026-06-17T08:01:37.163", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4295", "record": "FKIE_CVE-2024-4295", "field": "lastModified"}, {"timestamp": "2026-09-02T01:00:11.708Z", "date_only": false, "value": "2026-09-02T01:00:11.708460Z", "kind": "sighting", "label": "Seen", "source": "Telegram/XmAeLpCnDR7fQWWs5ZgvKZOpllMiY_5ATwXxwRV07Zq46AA", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "b29f9d6c-1e13-4af0-8c9a-ada0a563a3ad"}, {"timestamp": "2026-09-03T00:00:54.530Z", "date_only": false, "value": "2026-09-03T00:00:54.530664Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XmAeLpCnDR7fQWWs5ZgvKZOpllMiY_5ATwXxwRV07Zq46AA", "record": "CVE-2024-4295", "field": "creation_timestamp", "uuid": "eeef3801-94d7-4500-8742-c18c7bb1cd51"}]}