{"metadata": {"vulnerability": "cve-2024-49328", "count": 19, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-10-14T10:40:38.484Z", "date_only": false, "value": "2024-10-14T10:40:38.484Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-49328", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-10-20T07:58:15.308Z", "date_only": false, "value": "2024-10-20T07:58:15.308Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-49328", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-10-20T08:15:03Z", "date_only": false, "value": "2024-10-20T08:15:03Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JGMV-VP3C-XPJ5", "record": "GHSA-JGMV-VP3C-XPJ5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-10-20T08:15:03.667Z", "date_only": false, "value": "2024-10-20T08:15:03.667", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-49328", "record": "FKIE_CVE-2024-49328", "field": "published"}, {"timestamp": "2024-10-20T09:30:44Z", "date_only": false, "value": "2024-10-20T09:30:44Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JGMV-VP3C-XPJ5", "record": "GHSA-JGMV-VP3C-XPJ5", "field": "published"}, {"timestamp": "2024-10-20T10:44:06Z", "date_only": false, "value": "2024-10-20T10:44:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/8396", "record": "CVE-2024-49328", "field": "creation_timestamp", "uuid": "d9353c8d-0f35-4787-8feb-ca3b4d3eee8f", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49328 - Vivek Tamrakar WP REST API FNS Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-49328 \nPublished : Oct. 20, 2024, 8:15 a.m. | 21\u00a0minutes ago \nDescription : Authentication Bypass Using an Alternate Path or Channel vulnerability in Vivek Tamrakar WP REST API FNS allows Authentication Bypass.This issue affects WP REST API FNS: from n/a through 1.0.0. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/8396"}, {"timestamp": "2024-10-21T16:09:40.194Z", "date_only": false, "value": "2024-10-21T16:09:40.194461Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-49328", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-21T16:09:40.194Z", "date_only": false, "value": "2024-10-21T16:09:40.194461Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-49328", "record": "FKIE_CVE-2024-49328", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-21T16:10:18.608Z", "date_only": false, "value": "2024-10-21T16:10:18.608Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-49328", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-07T17:02:41Z", "date_only": false, "value": "2024-11-07T17:02:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3422", "record": "CVE-2024-49328", "field": "creation_timestamp", "uuid": "b7afaf5a-4567-42d1-b906-9cc0a14f7051", "content": "https://github.com/RandomRobbieBF/CVE-2024-49328\n\nWP REST API FNS <= 1.0.0 - Privilege Escalation\n#github #exploit #poc", "url": "https://t.me/CNArsenal/3422"}, {"timestamp": "2024-11-07T18:35:05Z", "date_only": false, "value": "2024-11-07T18:35:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11404", "record": "CVE-2024-49328", "field": "creation_timestamp", "uuid": "1e343615-8f2d-4f8c-b95c-3558f49e970f", "content": "#exploit\n1. CVE-2024-49328\nWP REST API FNS <= 1.0 - Privilege Escalation\nhttps://github.com/RandomRobbieBF/CVE-2024-49328\n\n2. CVE-2024-44258:\nSymlink Vulnerability in Apple ManagedConfiguration Framework\nhttps://github.com/ifpdz/CVE-2024-44258", "url": "https://t.me/CyberSecurityTechnologies/11404"}, {"timestamp": "2026-04-01T16:28:14.472Z", "date_only": false, "value": "2026-04-01T16:28:14.472Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Patchstack", "record": "cve-2024-49328", "field": "containers.cna.datePublic"}, {"timestamp": "2026-04-01T18:32:06Z", "date_only": false, "value": "2026-04-01T18:32:06Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JGMV-VP3C-XPJ5", "record": "GHSA-JGMV-VP3C-XPJ5", "field": "modified"}, {"timestamp": "2026-04-02T05:40:09.001Z", "date_only": false, "value": "2026-04-02T05:40:09.001954Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3miiil3eltr23", "record": "CVE-2024-49328", "field": "creation_timestamp", "uuid": "c455bdd2-6827-4702-8a6a-138a952fb5c2", "url": "https://bsky.app/profile/cyberhub.blog/post/3miiil3eltr23"}, {"timestamp": "2026-04-28T16:10:25.369Z", "date_only": false, "value": "2026-04-28T16:10:25.369Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-49328", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-28T16:10:25.369Z", "date_only": false, "value": "2026-04-28T16:10:25.369Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Patchstack", "record": "cve-2024-49328", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:59:42.883Z", "date_only": false, "value": "2026-06-17T07:59:42.883", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-49328", "record": "FKIE_CVE-2024-49328", "field": "lastModified"}, {"timestamp": "2026-09-18T04:00:12.255Z", "date_only": false, "value": "2026-09-18T04:00:12.255673Z", "kind": "sighting", "label": "Seen", "source": "Telegram/gjwuPtR5g9ZcdGbotbwBtnynac2LUnfJ7OAXHlG_NBqY9Yo", "record": "CVE-2024-49328", "field": "creation_timestamp", "uuid": "a6ac1554-8949-4860-b02c-d64ddea0c56a"}, {"timestamp": "2026-09-19T00:00:22.994Z", "date_only": false, "value": "2026-09-19T00:00:22.994976Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/gjwuPtR5g9ZcdGbotbwBtnynac2LUnfJ7OAXHlG_NBqY9Yo", "record": "CVE-2024-49328", "field": "creation_timestamp", "uuid": "50e48333-5edc-4ef0-a2be-55c9e0dbe98d"}]}