{"metadata": {"vulnerability": "cve-2025-1404", "count": 17, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-02-17T20:28:28.345Z", "date_only": false, "value": "2025-02-17T20:28:28.345Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-1404", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-28T22:01:07Z", "date_only": false, "value": "2025-02-28T22:01:07.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2025-1404", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-03-01T11:22:48.111Z", "date_only": false, "value": "2025-03-01T11:22:48.111Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-1404", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-01T11:27:27Z", "date_only": false, "value": "2025-03-01T11:27:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6072", "record": "CVE-2025-1404", "field": "creation_timestamp", "uuid": "77332925-b6ad-42bf-9286-d4c9c83c33d2", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1404\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ays_sccp_reports_user_search() function in all versions up to, and including, 4.4.7. This makes it possible for unauthenticated attackers to retrieve a list of registered user emails.\n\ud83d\udccf Published: 2025-03-01T11:22:48.111Z\n\ud83d\udccf Modified: 2025-03-01T11:22:48.111Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7363b5de-db30-4b35-b701-5c8f2835ec6c?source=cve\n2. https://wordpress.org/plugins/secure-copy-content-protection/#developers\n3. https://plugins.trac.wordpress.org/browser/secure-copy-content-protection/tags/4.4.6/admin/class-secure-copy-content-protection-admin.php#L943\n4. https://plugins.trac.wordpress.org/browser/secure-copy-content-protection/tags/4.4.6/admin/js/secure-copy-content-protection-admin.js\n5. https://plugins.trac.wordpress.org/changeset/3246301", "url": "https://t.me/DarkWebInformer_CVEAlerts/6072"}, {"timestamp": "2025-03-01T12:15:34Z", "date_only": false, "value": "2025-03-01T12:15:34Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8JXW-VXHJ-Q8P7", "record": "GHSA-8JXW-VXHJ-Q8P7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-03-01T12:15:34.310Z", "date_only": false, "value": "2025-03-01T12:15:34.310", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1404", "record": "FKIE_CVE-2025-1404", "field": "published"}, {"timestamp": "2025-03-01T12:30:35Z", "date_only": false, "value": "2025-03-01T12:30:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8JXW-VXHJ-Q8P7", "record": "GHSA-8JXW-VXHJ-Q8P7", "field": "published"}, {"timestamp": "2025-03-01T12:30:35Z", "date_only": false, "value": "2025-03-01T12:30:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8JXW-VXHJ-Q8P7", "record": "GHSA-8JXW-VXHJ-Q8P7", "field": "modified"}, {"timestamp": "2025-03-01T13:56:30Z", "date_only": false, "value": "2025-03-01T13:56:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/19234", "record": "CVE-2025-1404", "field": "creation_timestamp", "uuid": "eaed684b-8158-4bf7-baf9-2fce3dbe0b58", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1404 - WordPress Secure Copy Content Protection and Content Locking User Email Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-1404 \nPublished : March 1, 2025, 12:15 p.m. | 37\u00a0minutes ago \nDescription : The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ays_sccp_reports_user_search() function in all versions up to, and including, 4.4.7. This makes it possible for unauthenticated attackers to retrieve a list of registered user emails. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/19234"}, {"timestamp": "2025-03-02T11:46:59Z", "date_only": false, "value": "2025-03-02T11:46:59.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/F8DkQ3CjDI29vN-dWtBKGR7usoFjDFT9jrK3fmB6XEQXPP2Z", "record": "CVE-2025-1404", "field": "creation_timestamp", "uuid": "5e9217c9-55bb-43a2-a9b2-976aad5d3a4d"}, {"timestamp": "2025-03-03T20:54:44.742Z", "date_only": false, "value": "2025-03-03T20:54:44.742934Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-1404", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-03T20:54:44.742Z", "date_only": false, "value": "2025-03-03T20:54:44.742934Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1404", "record": "FKIE_CVE-2025-1404", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-03T20:56:03.895Z", "date_only": false, "value": "2025-03-03T20:56:03.895Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-1404", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-19T18:29:28Z", "date_only": false, "value": "2025-08-19T18:29:28.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "record": "CVE-2025-1404", "field": "creation_timestamp", "uuid": "d73769db-872e-493e-8bd1-c4d769cfd437"}, {"timestamp": "2026-04-08T17:00:56.504Z", "date_only": false, "value": "2026-04-08T17:00:56.504Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-1404", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T17:00:56.504Z", "date_only": false, "value": "2026-04-08T17:00:56.504Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "cve-2025-1404", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:39:04.620Z", "date_only": false, "value": "2026-06-17T08:39:04.620", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1404", "record": "FKIE_CVE-2025-1404", "field": "lastModified"}]}
