{"metadata": {"vulnerability": "cve-2025-24661", "count": 21, "kinds": {"milestone": 4, "sighting": 8, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-01-23T14:51:49.212Z", "date_only": false, "value": "2025-01-23T14:51:49.212Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-24661", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-03T14:23:53.755Z", "date_only": false, "value": "2025-02-03T14:23:53.755Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-24661", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-02-03T15:15:29Z", "date_only": false, "value": "2025-02-03T15:15:29Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MRQF-9666-2WQM", "record": "GHSA-MRQF-9666-2WQM", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-02-03T15:15:29.547Z", "date_only": false, "value": "2025-02-03T15:15:29.547", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24661", "record": "FKIE_CVE-2025-24661", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-02-03T15:18:53.755Z", "date_only": false, "value": "2025-02-03T15:18:53.755154Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbtojbr6d2c", "record": "CVE-2025-24661", "field": "creation_timestamp", "uuid": "724034d6-c3ff-49a2-90ee-b977933c9aa3", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbtojbr6d2c"}, {"timestamp": "2025-02-03T15:32:04Z", "date_only": false, "value": "2025-02-03T15:32:04Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MRQF-9666-2WQM", "record": "GHSA-MRQF-9666-2WQM", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-02-03T16:48:39.518Z", "date_only": false, "value": "2025-02-03T16:48:39.518665Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113940975827280277", "record": "CVE-2025-24661", "field": "creation_timestamp", "uuid": "fc310bea-5cd9-4339-a18b-3750a90e2f97", "url": "https://mastodon.social/users/CyberSignaler/statuses/113940975827280277"}, {"timestamp": "2025-02-03T17:48:40Z", "date_only": false, "value": "2025-02-03T17:48:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/17064", "record": "CVE-2025-24661", "field": "creation_timestamp", "uuid": "447a78f3-81d3-4b5f-9903-1bce8c9c0aca", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24661 - MagePeople Team Taxi Booking Manager for WooCommerce Deserialization of Untrusted Data Object Injection\", \n  \"Content\": \"CVE ID : CVE-2025-24661 \nPublished : Feb. 3, 2025, 3:15 p.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in MagePeople Team Taxi Booking Manager for WooCommerce allows Object Injection. This issue affects Taxi Booking Manager for WooCommerce: from n/a through 1.1.8. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/17064"}, {"timestamp": "2025-02-03T17:58:10.518Z", "date_only": false, "value": "2025-02-03T17:58:10.518875Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhc4ldxxq42i", "record": "CVE-2025-24661", "field": "creation_timestamp", "uuid": "d8eefb74-21ce-4669-bd41-0f304a9ed301", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhc4ldxxq42i"}, {"timestamp": "2025-02-03T18:10:45.770Z", "date_only": false, "value": "2025-02-03T18:10:45.770974Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113941298881486370", "record": "CVE-2025-24661", "field": "creation_timestamp", "uuid": "c0afb098-d2f7-41ac-bb3b-4ee4ffd19ff8", "url": "https://infosec.exchange/users/cve/statuses/113941298881486370"}, {"timestamp": "2025-02-04T17:12:47.860Z", "date_only": false, "value": "2025-02-04T17:12:47.860806Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhekj4mycp2w", "record": "CVE-2025-24661", "field": "creation_timestamp", "uuid": "002aec2f-2a25-4d3a-b23b-834965e0de1f", "url": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhekj4mycp2w"}, {"timestamp": "2025-05-19T16:39:00Z", "date_only": false, "value": "2025-05-19T16:39:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16871", "record": "CVE-2025-24661", "field": "creation_timestamp", "uuid": "e0c6475a-fd21-474d-8eb8-ae77d3c4436a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-24661\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Deserialization of Untrusted Data vulnerability in MagePeople Team Taxi Booking Manager for WooCommerce allows Object Injection.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 1.1.8.\n\ud83d\udccf Published: 2025-02-03T14:23:53.755Z\n\ud83d\udccf Modified: 2025-05-19T16:03:25.669Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/ecab-taxi-booking-manager/vulnerability/wordpress-taxi-booking-manager-for-woocommerce-plugin-1-1-8-php-object-injection-vulnerability?_s_id=cve", "url": "https://t.me/DarkWebInformer_CVEAlerts/16871", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-05-21T19:54:44.958Z", "date_only": false, "value": "2025-05-21T19:54:44.958401Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-24661", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-21T19:54:44.958Z", "date_only": false, "value": "2025-05-21T19:54:44.958401Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24661", "record": "FKIE_CVE-2025-24661", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-05-21T19:54:51.704Z", "date_only": false, "value": "2025-05-21T19:54:51.704Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-24661", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-26T18:36:19Z", "date_only": false, "value": "2025-08-26T18:36:19.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f7787455-9994-4047-b6f7-77347597c104", "record": "CVE-2025-24661", "field": "creation_timestamp", "uuid": "29a30c66-bb65-4947-91e7-d0cb91595728"}, {"timestamp": "2026-04-01T16:34:32.353Z", "date_only": false, "value": "2026-04-01T16:34:32.353Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Patchstack", "record": "cve-2025-24661", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-23T15:35:31Z", "date_only": false, "value": "2026-04-23T15:35:31Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MRQF-9666-2WQM", "record": "GHSA-MRQF-9666-2WQM", "field": "modified", "linked_record": true}, {"timestamp": "2026-04-28T16:11:31.450Z", "date_only": false, "value": "2026-04-28T16:11:31.450Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-24661", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-28T16:11:31.450Z", "date_only": false, "value": "2026-04-28T16:11:31.450Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Patchstack", "record": "cve-2025-24661", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:59:23.887Z", "date_only": false, "value": "2026-06-17T08:59:23.887", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24661", "record": "FKIE_CVE-2025-24661", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-11T09:30:53.304Z", "anchors": {"origin": {"timestamp": "2025-02-03T14:23:53.755Z", "date_only": false, "value": "2025-02-03T14:23:53.755Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-24661", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-02-03T14:23:53.755Z", "date_only": false, "value": "2025-02-03T14:23:53.755Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-24661", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-05-19T16:39:00Z", "date_only": false, "value": "2025-05-19T16:39:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16871", "record": "CVE-2025-24661", "field": "creation_timestamp", "uuid": "e0c6475a-fd21-474d-8eb8-ae77d3c4436a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-24661\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Deserialization of Untrusted Data vulnerability in MagePeople Team Taxi Booking Manager for WooCommerce allows Object Injection.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 1.1.8.\n\ud83d\udccf Published: 2025-02-03T14:23:53.755Z\n\ud83d\udccf Modified: 2025-05-19T16:03:25.669Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/ecab-taxi-booking-manager/vulnerability/wordpress-taxi-booking-manager-for-woocommerce-plugin-1-1-8-php-object-injection-vulnerability?_s_id=cve", "url": "https://t.me/DarkWebInformer_CVEAlerts/16871", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 9080106.245, "hours": 2522.251734722222, "days": 105.09382228009258, "min_seconds": 9080106.245, "max_seconds": 9080106.245, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-03T14:23:53.755Z", "date_only": false, "value": "2025-02-03T14:23:53.755Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-24661", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-05-19T16:39:00Z", "date_only": false, "value": "2025-05-19T16:39:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16871", "record": "CVE-2025-24661", "field": "creation_timestamp", "uuid": "e0c6475a-fd21-474d-8eb8-ae77d3c4436a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-24661\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Deserialization of Untrusted Data vulnerability in MagePeople Team Taxi Booking Manager for WooCommerce allows Object Injection.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 1.1.8.\n\ud83d\udccf Published: 2025-02-03T14:23:53.755Z\n\ud83d\udccf Modified: 2025-05-19T16:03:25.669Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/ecab-taxi-booking-manager/vulnerability/wordpress-taxi-booking-manager-for-woocommerce-plugin-1-1-8-php-object-injection-vulnerability?_s_id=cve", "url": "https://t.me/DarkWebInformer_CVEAlerts/16871", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 55796819.549811, "hours": 15499.116541614167, "days": 645.7965225672569, "min_seconds": 55796819.549811, "max_seconds": 55796819.549811, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-03T14:23:53.755Z", "date_only": false, "value": "2025-02-03T14:23:53.755Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-24661", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T09:30:53.304Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 46716713.304811, "hours": 12976.864806891945, "days": 540.7027002871644, "min_seconds": 46716713.304811, "max_seconds": 46716713.304811, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-05-19T16:39:00Z", "date_only": false, "value": "2025-05-19T16:39:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16871", "record": "CVE-2025-24661", "field": "creation_timestamp", "uuid": "e0c6475a-fd21-474d-8eb8-ae77d3c4436a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-24661\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Deserialization of Untrusted Data vulnerability in MagePeople Team Taxi Booking Manager for WooCommerce allows Object Injection.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 1.1.8.\n\ud83d\udccf Published: 2025-02-03T14:23:53.755Z\n\ud83d\udccf Modified: 2025-05-19T16:03:25.669Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/ecab-taxi-booking-manager/vulnerability/wordpress-taxi-booking-manager-for-woocommerce-plugin-1-1-8-php-object-injection-vulnerability?_s_id=cve", "url": "https://t.me/DarkWebInformer_CVEAlerts/16871", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-11T09:30:53.304Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}