{"vulnerability": "cve-2025-3861", "sightings": [{"uuid": "41a1aa8f-9d91-432e-8344-5f155b59ad81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3861", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmiyx5n6lk2", "content": "", "creation_timestamp": "2025-04-25T05:42:34.374037Z"}, {"uuid": "fc1c68b8-289a-411c-a4b0-329b03074762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38616", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m6ernluq7c2e", "content": "", "creation_timestamp": "2025-11-24T12:00:03.952370Z"}, {"uuid": "c293fb8c-5bd1-4e50-b0b0-7136fc1991a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38617", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3m2cadk3fzu2b", "content": "", "creation_timestamp": "2025-10-03T14:04:04.489832Z"}, {"uuid": "2cf9021b-a661-42f1-92d1-595d41dc7aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38615", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lwrwg4augk2p", "content": "", "creation_timestamp": "2025-08-19T22:08:26.453087Z"}, {"uuid": "6b307afe-8358-49a6-b407-3bffe166c2ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38618", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3m2ofzpvxsw2z", "content": "", "creation_timestamp": "2025-10-08T10:17:54.304693Z"}, {"uuid": "d548c638-56ad-4cd1-a362-52fb54cc7d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38618", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3m2ofzq7kow2b", "content": "", "creation_timestamp": "2025-10-08T10:17:54.927894Z"}, {"uuid": "e063214e-4c30-45ad-ac74-c2a5395aa31a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38616", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lxbeobmuss24", "content": "", "creation_timestamp": "2025-08-26T01:33:31.937640Z"}, {"uuid": "f4316044-6a90-41ff-bc19-d7fa5c24548d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38616", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3m7sa77dk4m26", "content": "", "creation_timestamp": "2025-12-12T13:50:13.233974Z"}, {"uuid": "1c407e5d-bece-46c1-9dc8-332e4e993a44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38617", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mgb3nblrxy2o", "content": "", "creation_timestamp": "2026-03-04T20:09:41.979487Z"}, {"uuid": "932448b3-6682-46e1-b02a-3e691199bbbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38617", "type": "seen", "source": "https://bsky.app/profile/news.karthihegde.dev/post/3mgczbv2hu72b", "content": "", "creation_timestamp": "2026-03-05T14:32:52.305343Z"}, {"uuid": "4a55a66a-dac5-47fd-9ff1-f697bd671ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38617", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mgi7bhkqd72s", "content": "", "creation_timestamp": "2026-03-07T16:03:18.899826Z"}, {"uuid": "948f6581-211b-40f5-9070-ffb34b9eafca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38617", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhcguts3a32o", "content": "", "creation_timestamp": "2026-03-18T02:28:39.115877Z"}, {"uuid": "2538637f-ff19-4474-9d38-f0c62914fb84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38617", "type": "seen", "source": "https://bsky.app/profile/lobsters-feed.bsky.social/post/3mg6po3rxj42n", "content": "", "creation_timestamp": "2026-03-03T21:30:05.833938Z"}, {"uuid": "6a5dd27c-3874-425e-9cb9-656e801d93eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38617", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mggf5jzuf322", "content": "", "creation_timestamp": "2026-03-06T22:43:10.678817Z"}, {"uuid": "fe44a86f-8027-4115-a7c2-a1bc7d4de0bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38617", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mgggmpqbs723", "content": "", "creation_timestamp": "2026-03-06T23:09:33.120823Z"}, {"uuid": "9ab7272b-de5b-429f-8b25-82d07d105689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38615", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "4ca16287-94ae-4e92-b7be-0e0803200051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38617", "type": "seen", "source": "https://bsky.app/profile/0xor0ne.bsky.social/post/3mhxtz5xwyk2u", "content": "", "creation_timestamp": "2026-03-26T14:49:38.071975Z"}, {"uuid": "87c4d3e6-fa78-4ea3-a6d6-321953e0e35d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38617", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhz33vqhae2y", "content": "", "creation_timestamp": "2026-03-27T02:29:07.093528Z"}, {"uuid": "f0dfbc9b-d540-4de7-8b0d-460482f198ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38614", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "c9ea7b7e-8f3f-4f8a-b8b9-291fec88fdc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38618", "type": "seen", "source": "Telegram/N8QSYVeN7Wglyl4iHCf5V_B76mwZPmt3n6IDfdaed2AazXI", "content": "", "creation_timestamp": "2026-01-07T17:07:40.000000Z"}, {"uuid": "2fd20d63-cb8d-48e6-812f-adfae1c0d928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38618", "type": "published-proof-of-concept", "source": "Telegram/0kJanDSEprBDcoadPdI2GM5tCx1ZeQ142rXTCiGKimcbKNU", "content": "", "creation_timestamp": "2026-01-07T17:07:30.000000Z"}, {"uuid": "12d1bce3-e42c-4fa3-8934-73ad88c7e244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3861", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13382", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3861\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Prevent Direct Access \u2013 Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access and modification of data| due to a misconfigured capability check on the 'pda_lite_custom_permission_check' function in versions 2.8.6 to 2.8.8.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to access and change the protection status of media.\n\ud83d\udccf Published: 2025-04-25T05:25:07.164Z\n\ud83d\udccf Modified: 2025-04-25T05:25:07.164Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2ed83916-3cf7-4fc6-a16f-45b40cedc721?source=cve\n2. https://plugins.trac.wordpress.org/browser/prevent-direct-access/tags/2.8.8.2/includes/pda_lite_api.php#L71\n3. https://plugins.trac.wordpress.org/changeset/3279923/", "creation_timestamp": "2025-04-25T06:10:53.000000Z"}, {"uuid": "9f49cd50-d3ea-43f1-a28d-72aff74e219c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3861", "type": "seen", "source": "https://t.me/cvedetector/23732", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3861 - WordPress Prevent Direct Access Unauthorized Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3861 \nPublished : April 25, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The Prevent Direct Access \u2013 Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access and modification of data| due to a misconfigured capability check on the 'pda_lite_custom_permission_check' function in versions 2.8.6 to 2.8.8.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to access and change the protection status of media. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T09:09:12.000000Z"}, {"uuid": "ba8dd69e-3948-4364-a826-0367acefeba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38614", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10", "content": "", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}, {"uuid": "cc8d67f7-d3e6-4bd6-b883-1d96d3621484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38614", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:19:13.284838Z"}, {"uuid": "5349e532-a7a4-4bda-9c4b-73720e108fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38617", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:51:23.499661Z"}]}