{"metadata": {"vulnerability": "cve-2024-6164", "count": 29, "kinds": {"milestone": 4, "sighting": 16, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-06-19T14:33:57.257Z", "date_only": false, "value": "2024-06-19T14:33:57.257Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-6164", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-07-18T06:00:04.048Z", "date_only": false, "value": "2024-07-18T06:00:04.048Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-6164", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-07-18T06:00:04.048Z", "date_only": false, "value": "2024-07-18T06:00:04.048Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "cve-2024-6164", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-18T06:15:02Z", "date_only": false, "value": "2024-07-18T06:15:02Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VWV2-7PWM-39X4", "record": "GHSA-VWV2-7PWM-39X4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-07-18T06:15:02.233Z", "date_only": false, "value": "2024-07-18T06:15:02.233", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6164", "record": "FKIE_CVE-2024-6164", "field": "published"}, {"timestamp": "2024-07-18T06:31:15Z", "date_only": false, "value": "2024-07-18T06:31:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VWV2-7PWM-39X4", "record": "GHSA-VWV2-7PWM-39X4", "field": "published"}, {"timestamp": "2024-07-18T09:16:25Z", "date_only": false, "value": "2024-07-18T09:16:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/1141", "record": "CVE-2024-6164", "field": "creation_timestamp", "uuid": "b470cb67-af2b-4fa5-a9dd-6e7bb6ba17c1", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6164 - Cisco Filter & Grids WordPress Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6164 \nPublished : July 18, 2024, 6:15 a.m. | 35\u00a0minutes ago \nDescription : The Filter & Grids WordPress plugin before 2.8.33 is vulnerable to Local File Inclusion via the post_layout parameter. This makes it possible for an unauthenticated attacker to include and execute PHP files on the server, allowing the execution of any PHP code in those files. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/1141"}, {"timestamp": "2024-07-30T17:06:49.485Z", "date_only": false, "value": "2024-07-30T17:06:49.485162Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-6164", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-07-30T17:06:49.485Z", "date_only": false, "value": "2024-07-30T17:06:49.485162Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6164", "record": "FKIE_CVE-2024-6164", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-07-30T17:13:18.492Z", "date_only": false, "value": "2024-07-30T17:13:18.492Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-6164", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T15:32:05Z", "date_only": false, "value": "2024-08-01T15:32:05Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VWV2-7PWM-39X4", "record": "GHSA-VWV2-7PWM-39X4", "field": "modified"}, {"timestamp": "2024-08-01T21:33:04.599Z", "date_only": false, "value": "2024-08-01T21:33:04.599Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-6164", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-01T21:33:04.599Z", "date_only": false, "value": "2024-08-01T21:33:04.599Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-6164", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-30T06:52:02Z", "date_only": false, "value": "2024-08-30T06:52:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1554", "record": "CVE-2024-6164", "field": "creation_timestamp", "uuid": "baddad27-2194-428d-89fb-b6c5c39fec6d", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1554"}, {"timestamp": "2024-08-31T12:29:12Z", "date_only": false, "value": "2024-08-31T12:29:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XpvaFCWqDdhczMpL78DIu7UwbRt1BfqFLpK3OfazzKgSSlAyeg", "record": "CVE-2024-6164", "field": "creation_timestamp", "uuid": "0e6405a0-5d97-4634-aeb9-eb3254cdb1e6"}, {"timestamp": "2024-08-31T12:42:28Z", "date_only": false, "value": "2024-08-31T12:42:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3v_L1Km8kHglM99z9Gx-p2lsvnYIaRU3JVXDXxZhsRyM6xs7", "record": "CVE-2024-6164", "field": "creation_timestamp", "uuid": "ca210ca0-2d6e-412b-b5a5-80518a92f462"}, {"timestamp": "2024-08-31T13:09:22Z", "date_only": false, "value": "2024-08-31T13:09:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1580", "record": "CVE-2024-6164", "field": "creation_timestamp", "uuid": "6d680dc4-ee6d-45da-abf0-af40af8e7064", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1580"}, {"timestamp": "2024-09-02T21:35:26Z", "date_only": false, "value": "2024-09-02T21:35:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/leak503/506", "record": "CVE-2024-6164", "field": "creation_timestamp", "uuid": "4ec9b555-0bed-4324-9b58-ca01e1414ec3", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/leak503/506"}, {"timestamp": "2024-09-07T05:42:04Z", "date_only": false, "value": "2024-09-07T05:42:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1520", "record": "CVE-2024-6164", "field": "creation_timestamp", "uuid": "a42a831b-5672-4361-b071-1d89f71de1d4", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1520"}, {"timestamp": "2024-09-07T05:42:04Z", "date_only": false, "value": "2024-09-07T05:42:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1531", "record": "CVE-2024-6164", "field": "creation_timestamp", "uuid": "8a76b65a-b83a-44b1-9cac-1d2831e0aa43", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1531"}, {"timestamp": "2024-09-07T16:14:23Z", "date_only": false, "value": "2024-09-07T16:14:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/454", "record": "CVE-2024-6164", "field": "creation_timestamp", "uuid": "3c7ce878-39ad-48ce-bc52-460e61cf906b", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/ton618cyber/454"}, {"timestamp": "2024-09-13T16:57:01Z", "date_only": false, "value": "2024-09-13T16:57:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1602", "record": "CVE-2024-6164", "field": "creation_timestamp", "uuid": "589def12-613f-4295-95e6-db783ebed07d", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1602"}, {"timestamp": "2024-10-18T12:25:41Z", "date_only": false, "value": "2024-10-18T12:25:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1615", "record": "CVE-2024-6164", "field": "creation_timestamp", "uuid": "4749ef53-3f6e-4b00-b9f7-5575ca04ddb8", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1615"}, {"timestamp": "2024-10-18T12:26:48Z", "date_only": false, "value": "2024-10-18T12:26:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/74IzvRfHv6As3hyVMCWy5rx44qm1MKm9hZLdVsqv0WV9bgP1", "record": "CVE-2024-6164", "field": "creation_timestamp", "uuid": "451af162-ec50-41f5-bed5-6ce9b6d7bc2e"}, {"timestamp": "2024-11-12T20:45:56Z", "date_only": false, "value": "2024-11-12T20:45:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackerInvestigationZone/9", "record": "CVE-2024-6164", "field": "creation_timestamp", "uuid": "35a47dd7-7f3e-419b-8707-02dd60d7dcc0", "content": "\ud83d\udea8_CvEploiterv2 x xWPv3 Ultimate/Beast Software\n\n\ud83c\udfafThe most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n\u00a0\u00a0\u00a0\u00a0 with the latest version/method.]\n\n\u2699\ufe0fCVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n \u2699\ufe0fCVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n\u2699\ufe0fCVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n\u2699\ufe0fCVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n\u2699\ufe0fCVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n\u2699\ufe0f#CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n\u2699\ufe0fCVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n\u2699\ufe0fCVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n\u2699\ufe0fCVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\n#Investigation_of_hacking \n#Cyber_Security_News\n#codeb0ss", "url": "https://t.me/HackerInvestigationZone/9"}, {"timestamp": "2024-11-30T13:27:14Z", "date_only": false, "value": "2024-11-30T13:27:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1634", "record": "CVE-2024-6164", "field": "creation_timestamp", "uuid": "dffc5665-2e33-473c-b4be-ee0eec5e0e7f", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1634"}, {"timestamp": "2024-12-18T18:01:34Z", "date_only": false, "value": "2024-12-18T18:01:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1653", "record": "CVE-2024-6164", "field": "creation_timestamp", "uuid": "a21ab466-18f9-46a9-9b34-d48fdb947adc", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/codeb0ss/1653"}, {"timestamp": "2025-03-16T00:41:48Z", "date_only": false, "value": "2025-03-16T00:41:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyber_hsecurity/3301", "record": "CVE-2024-6164", "field": "creation_timestamp", "uuid": "600fe38e-b74b-4d68-8f44-435d1dd63094", "content": "CvEploiterv2 x xWPv3 [Ultimate/Beast Software.]\n\n[The most advanced software for CV 2024 expl0its and WordPress vulnerabilities\n     with the latest version/method.]\n\n1x => CVE-2024-38761 - Wordpress [Zephyr Project Manager] < Unauthenticated Information Exposure.\n\n2x => CVE-2024-38759 - Wordpress [Search & Replace] < Unauthenticated PHP Object Injection.\n\n3x => CVE-2024-6313 - Wordpress [Gutenberg Forms] < Unauthenticated Arbitrary File Upload.\n\n4x => CVE-2024-6164 - Wordpress [Filter & Grids] < Unauthenticated Local File Inclusion.\n\n5x => CVE-2024-40348 - \n[Bazarr] < Unauthenticated Arbitrary File Read.\n\n6x => CVE-2024-4295 - Wordpress [Email Subscribers by Icegram Expres] < Unauthenticated SQL Injection via Hash.\n\n7x => CVE-2024-4577 - PHP [CGI] < Unauthenticated Command Injection.\n\n8x => CVE-2024-4836 - [Edito CMS] < Unauthenticated Sensitive Data Leak.\n\n9x => CVE-2024-32399 - RaidenMAILD [MailServer] < Unauthenticated Path Traversal.\n\nEnjoy;", "url": "https://t.me/cyber_hsecurity/3301"}, {"timestamp": "2026-06-17T08:17:25.040Z", "date_only": false, "value": "2026-06-17T08:17:25.040", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6164", "record": "FKIE_CVE-2024-6164", "field": "lastModified"}]}