{"metadata": {"vulnerability": "cve-2025-3515", "count": 41, "kinds": {"milestone": 4, "sighting": 26, "kev": 0, "other": 11}}, "data": [{"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2025-3515", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-04-11T11:25:49.385Z", "date_only": false, "value": "2025-04-11T11:25:49.385Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-3515", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-06-12T05:23:45Z", "date_only": false, "value": "2025-06-12T05:23:45.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2025-3515", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2025-06-16T20:35:08Z", "date_only": false, "value": "2025-06-16T20:35:08.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2025-3515", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2025-06-17T09:21:39.083Z", "date_only": false, "value": "2025-06-17T09:21:39.083Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-3515", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-06-17T09:41:29Z", "date_only": false, "value": "2025-06-17T09:41:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18573", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "9ddc7e4c-0b23-4915-87be-efd7f6c6cdab", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3515\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 1.3.8.9. This makes it possible for unauthenticated attackers to bypass the plugin's blacklist and upload .phar or other dangerous file types on the affected site's server, which may make remote code execution possible on the servers that are configured to handle .phar files as executable PHP scripts, particularly in default Apache+mod_php configurations where the file extension is not strictly validated before being passed to the PHP interpreter.\n\ud83d\udccf Published: 2025-06-17T09:21:39.083Z\n\ud83d\udccf Modified: 2025-06-17T09:21:39.083Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e1298242-61d2-495e-bae7-96b5e12bd03d?source=cve\n2. https://plugins.trac.wordpress.org/browser/drag-and-drop-multiple-file-upload-contact-form-7/tags/1.3.8.8/inc/dnd-upload-cf7.php#L845\n3. https://plugins.trac.wordpress.org/changeset/3310153/", "url": "https://t.me/DarkWebInformer_CVEAlerts/18573"}, {"timestamp": "2025-06-17T10:01:14Z", "date_only": false, "value": "2025-06-17T10:01:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ONimq940-aml_-ziaQNnPitR2a4dvARau7ekaKGXqYn5E4A", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "ab07f6a6-388e-4ecd-8ac6-3f3569582504"}, {"timestamp": "2025-06-17T10:15:23Z", "date_only": false, "value": "2025-06-17T10:15:23Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-63J5-3FH3-7X8G", "record": "GHSA-63J5-3FH3-7X8G", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-06-17T10:15:23.507Z", "date_only": false, "value": "2025-06-17T10:15:23.507", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3515", "record": "FKIE_CVE-2025-3515", "field": "published"}, {"timestamp": "2025-06-17T11:03:08.372Z", "date_only": false, "value": "2025-06-17T11:03:08.372021Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrsdul7yym2u", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "e439118f-3213-4f6f-99e6-cb6063ecf11b", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrsdul7yym2u"}, {"timestamp": "2025-06-17T12:31:15Z", "date_only": false, "value": "2025-06-17T12:31:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-63J5-3FH3-7X8G", "record": "GHSA-63J5-3FH3-7X8G", "field": "published"}, {"timestamp": "2025-06-17T12:31:15Z", "date_only": false, "value": "2025-06-17T12:31:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-63J5-3FH3-7X8G", "record": "GHSA-63J5-3FH3-7X8G", "field": "modified"}, {"timestamp": "2025-06-17T14:22:29.023Z", "date_only": false, "value": "2025-06-17T14:22:29.023382Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-3515", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-06-17T14:22:29.023Z", "date_only": false, "value": "2025-06-17T14:22:29.023382Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3515", "record": "FKIE_CVE-2025-3515", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-06-17T14:26:20.937Z", "date_only": false, "value": "2025-06-17T14:26:20.937Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-3515", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-23T11:00:06Z", "date_only": false, "value": "2025-06-23T11:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/pNTteL-Xx8i8chGncpiIBXbULPUr3pQKBk06IlAIn1UZCI0", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "b7ad6dee-c0b5-45ea-bdbb-45691ef111c3"}, {"timestamp": "2025-08-03T21:03:02.620Z", "date_only": false, "value": "2025-08-03T21:03:02.620011Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlbxvqpe2g", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "2961955b-5174-4b03-a99b-3416f2147dff", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlbxvqpe2g"}, {"timestamp": "2025-08-29T21:02:27.446Z", "date_only": false, "value": "2025-08-29T21:02:27.446532Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxfa2ess2o", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "696c5e22-0167-4c16-9722-06a4679b3ee8", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxfa2ess2o"}, {"timestamp": "2025-09-01T15:53:55Z", "date_only": false, "value": "2025-09-01T15:53:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/49885", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "f5a09484-f4ee-4619-ae60-38e16b3db1f0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aWordPress File Upload RCE Exploit\nURL\uff1ahttps://github.com/blueisbeautiful/CVE-2025-3515\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/49885"}, {"timestamp": "2025-09-01T21:00:04Z", "date_only": false, "value": "2025-09-01T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/nfGTp2xTn4QGBhVuPNna78NmZEMmW41bwCC35jvxvcYj_Bw", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "2ae43c42-28e2-4d32-b224-83cc0de93be8"}, {"timestamp": "2025-09-03T07:53:54Z", "date_only": false, "value": "2025-09-03T07:53:54.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-3515.yaml", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "21df2ac9-0c27-41a8-b3b4-848a7c7afe37", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-3515.yaml"}, {"timestamp": "2025-09-03T08:08:47Z", "date_only": false, "value": "2025-09-03T08:08:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/zero_day_uz/503", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "bee0aa14-5e07-4539-95c7-1a6a53629b4c", "content": "CVE-2025-3515 - WordPress File Upload RCE\n\nexploit", "url": "https://t.me/zero_day_uz/503"}, {"timestamp": "2025-09-03T09:44:01Z", "date_only": false, "value": "2025-09-03T09:44:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/50097", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "3ceec3ba-ece3-46e6-ab9d-c75b165804fd", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2025-3515 WordPress lab for Drag and Drop Multiple File Upload for CF7: Dockerized PoC & Nuclei testing\nURL\uff1ahttps://github.com/ImBIOS/lab-cve-2025-3515\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/50097"}, {"timestamp": "2025-09-03T10:13:07Z", "date_only": false, "value": "2025-09-03T10:13:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/50100", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "d5dd6f3d-f6be-41db-a577-7886fc59b19f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-3515 WordPress lab for Drag and Drop Multiple File Upload for CF7: Dockerized PoC & Nuclei testing\nURL\uff1ahttps://github.com/Maitonnx/Anydesk-Exploit-CVE-2025-12654-RCE-Builder\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/50100"}, {"timestamp": "2025-09-03T15:00:07Z", "date_only": false, "value": "2025-09-03T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ktfF1YjAfTgGnV4T6AQBqxJFytPD6zIUM1POBEH3rhcPUWE", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "3f5d4aff-480e-4677-9428-7b0d5b62f348"}, {"timestamp": "2025-09-04T20:55:08Z", "date_only": false, "value": "2025-09-04T20:55:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/50284", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "049e1352-4e71-40a4-bee4-5aada51b8c8e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udee0\ufe0f Reproduce and validate CVE-2025-3515 in a Dockerized WordPress lab to test unrestricted file uploads via the Contact Form 7 plugin.\nURL\uff1ahttps://github.com/MrSoules/lab-cve-2025-3515\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/50284"}, {"timestamp": "2025-09-05T03:00:06Z", "date_only": false, "value": "2025-09-05T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/NZw_dyKg3sBl_OoVab8mtW04AyfXZ90mr3x5yRa5cUHgMy8", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "2e2271d8-55fd-4f72-b7d1-d79660325d3a"}, {"timestamp": "2025-09-05T21:02:25.382Z", "date_only": false, "value": "2025-09-05T21:02:25.382956Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ly4knrgdgf24", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "2b372ac3-26a8-4e15-a172-e4e7dc893270", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ly4knrgdgf24"}, {"timestamp": "2025-09-26T22:25:44Z", "date_only": false, "value": "2025-09-26T22:25:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/53219", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "9efcd090-be1b-4e7c-9b8f-160a849283be", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1a\ud83d\udee0\ufe0f Reproduce and validate CVE-2025-3515 by setting up a Dockerized WordPress lab for testing unrestricted file uploads in a vulnerable plugin.\nURL\uff1ahttps://github.com/robertskimengote/lab-cve-2025-3515\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/53219"}, {"timestamp": "2025-09-27T03:01:09Z", "date_only": false, "value": "2025-09-27T03:01:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7FcFWuNWPidnSTqDbK2SI7frFY8bVIrg6sQ2oUz4aEJxH6Y", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "caa07e7e-912d-46d7-ba46-0e41bc04b2aa"}, {"timestamp": "2025-09-29T16:59:29Z", "date_only": false, "value": "2025-09-29T16:59:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/53558", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "897c8d9d-e562-4233-b314-a183beb0b736", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udee0\ufe0f Reproduce and validate CVE-2025-3515 by setting up a Dockerized WordPress lab for testing unrestricted file uploads in a vulnerable plugin.\nURL\uff1ahttps://github.com/maestro-ant/Vvveb-CMS-CVE-2025-8518\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/53558"}, {"timestamp": "2025-10-03T12:45:53Z", "date_only": false, "value": "2025-10-03T12:45:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/54025", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "2feac4eb-ecc7-48f3-9997-5fd04726484d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udee0\ufe0f Reproduce and validate CVE-2025-3515 by setting up a Dockerized WordPress lab for testing unrestricted file uploads in a vulnerable plugin.\nURL\uff1ahttps://github.com/fa1consec/cve_2025_61622_poc\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/54025"}, {"timestamp": "2025-10-04T19:09:55Z", "date_only": false, "value": "2025-10-04T19:09:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/54180", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "581eca77-da33-4465-af0a-42d786d0872a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1a\ud83d\udee0\ufe0f Reproduce and validate CVE-2025-3515 by setting up a Dockerized WordPress lab for testing unrestricted file uploads in a vulnerable plugin.\nURL\uff1ahttps://github.com/ivy2320/CTF-event\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/54180"}, {"timestamp": "2026-04-08T17:28:55.327Z", "date_only": false, "value": "2026-04-08T17:28:55.327Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-3515", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T17:28:55.327Z", "date_only": false, "value": "2026-04-08T17:28:55.327Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "cve-2025-3515", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T09:20:05.533Z", "date_only": false, "value": "2026-06-17T09:20:05.533", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3515", "record": "FKIE_CVE-2025-3515", "field": "lastModified"}, {"timestamp": "2026-07-15T10:00:05.035Z", "date_only": false, "value": "2026-07-15T10:00:05.035885Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/breachdetector/856597", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "c379ca23-bb58-4d4e-b9e4-336b45b2f309", "url": "https://t.me/breachdetector/856597"}, {"timestamp": "2026-07-16T00:00:20.528Z", "date_only": false, "value": "2026-07-16T00:00:20.528539Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/breachdetector/856597", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "d52e13d3-54e1-457f-af14-d1fc69d01d55", "url": "https://t.me/breachdetector/856597"}, {"timestamp": "2026-07-20T20:00:10.837Z", "date_only": false, "value": "2026-07-20T20:00:10.837527Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/2735", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "24327a54-fb46-4921-8860-07029218ed0a", "url": "https://t.me/proxy_bar/2735"}, {"timestamp": "2026-07-21T00:00:28.935Z", "date_only": false, "value": "2026-07-21T00:00:28.935969Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/2735", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "aa88bf83-473f-4dd2-a60c-885142f5f609", "url": "https://t.me/proxy_bar/2735"}, {"timestamp": "2026-07-22T00:00:24.854Z", "date_only": false, "value": "2026-07-22T00:00:24.854941Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2735", "record": "CVE-2025-3515", "field": "creation_timestamp", "uuid": "4199d8cf-436c-4668-bb2c-94be8cc461aa", "url": "https://t.me/proxy_bar/2735"}]}