{"vulnerability": "cve-2025-3867", "sightings": [{"uuid": "6b7cd3f4-2ae8-4d97-81e8-39c258b1be0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3867", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmnxr2l5332", "content": "", "creation_timestamp": "2025-04-25T07:07:21.202622Z"}, {"uuid": "77b1ee43-4bf3-43b2-a5ab-7cf1589b99be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3867", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnnmts6ggy2d", "content": "", "creation_timestamp": "2025-04-25T16:19:41.359707Z"}, {"uuid": "b9dff34b-63e7-4aae-884e-bf00a9af325c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38675", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lxbeobmuss24", "content": "", "creation_timestamp": "2025-08-26T01:33:32.015436Z"}, {"uuid": "6e80f189-c08d-444b-ba15-704c5623ff36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38676", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115095281776659037", "content": "", "creation_timestamp": "2025-08-26T13:23:47.887688Z"}, {"uuid": "a971b902-2cc3-422c-ba7c-df32808b9c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38676", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxfa56lb2b", "content": "", "creation_timestamp": "2025-08-29T21:02:28.023888Z"}, {"uuid": "f4f658be-1565-40a5-9189-5feaba41df33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38677", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lxmm35u4vk27", "content": "", "creation_timestamp": "2025-08-30T12:45:10.587733Z"}, {"uuid": "12206297-8465-4431-a367-daa0dce12cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38672", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "77ea84af-de38-4927-a9db-ac96ec18cc30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38673", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "78c902c5-0a9f-4140-b36a-8dc26df33b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38674", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "480358c4-26d6-4437-a1d4-91bfdbdfeda3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38679", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "0c13c8df-e3d5-465c-bca2-2d5c23e11d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38679", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "e854cc38-d4ea-4857-8dcb-26ad94f387e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38676", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "6d926c00-1f10-4406-8313-178bd846d666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38678", "type": "published-proof-of-concept", "source": "Telegram/5Go4y9Sp59a8HRsoMaTj0X-e6nFTkvRgJdqk6vUB2AgWKv0", "content": "", "creation_timestamp": "2025-11-24T15:00:07.000000Z"}, {"uuid": "7a01f1d4-e53b-45a4-8542-7e0cd2e73015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3867", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13388", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3867\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Ajax Comment Form CST plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing or incorrect nonce validation via the 'acform_cst_settings' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-04-25T06:45:27.801Z\n\ud83d\udccf Modified: 2025-04-25T06:45:27.801Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2a001b31-042d-451b-ad9e-df8d41d3c2b0?source=cve\n2. https://wordpress.org/plugins/ajax-comment-form-cst/", "creation_timestamp": "2025-04-25T07:07:15.000000Z"}, {"uuid": "ed0167cf-87bc-4261-bf2a-1a66d62b082d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38678", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/60913", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1amaybe the first poc for CVE-2025-38678?\nURL\uff1ahttps://github.com/guard-wait/CVE-2025-38678_POC\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-11-27T07:58:22.000000Z"}, {"uuid": "5e44d4ac-ee1f-46ea-8764-4b7de6c09acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38676", "type": "published-proof-of-concept", "source": "Telegram/CGQPdykI76im0kkXFJMRGBxEwLfKrp_bs0GFMR3MbnQacjY", "content": "", "creation_timestamp": "2026-01-08T23:06:01.000000Z"}, {"uuid": "553b51bb-0d69-4f9e-9331-d5676edc8611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38677", "type": "published-proof-of-concept", "source": "Telegram/CGQPdykI76im0kkXFJMRGBxEwLfKrp_bs0GFMR3MbnQacjY", "content": "", "creation_timestamp": "2026-01-08T23:06:01.000000Z"}, {"uuid": "81aa3ee0-6a9f-4812-a46b-c77e3922b5ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38679", "type": "published-proof-of-concept", "source": "Telegram/n46f-SNrEX1cfeqCoigfhmzJcsg_QMSCn13PgXpjR2j0r24", "content": "", "creation_timestamp": "2026-01-08T23:06:12.000000Z"}, {"uuid": "52cd4261-5e96-4cf8-825e-8b9a941dfd96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38679", "type": "published-proof-of-concept", "source": "Telegram/CGQPdykI76im0kkXFJMRGBxEwLfKrp_bs0GFMR3MbnQacjY", "content": "", "creation_timestamp": "2026-01-08T23:06:01.000000Z"}, {"uuid": "f88c9fdb-f8b6-4ae1-ae8e-d1d6d34db125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38676", "type": "published-proof-of-concept", "source": "Telegram/7YsezDaia3BA-XoFQp1rAm9DJWkOqrM1x1h9TBjHQNo0SrQ", "content": "", "creation_timestamp": "2025-08-27T09:00:04.000000Z"}, {"uuid": "7d5ae81b-4577-4bd8-9fc0-f8405967af1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3867", "type": "seen", "source": "https://t.me/cvedetector/23740", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3867 - WordPress Ajax Comment Form CST CSRF\", \n  \"Content\": \"CVE ID : CVE-2025-3867 \nPublished : April 25, 2025, 7:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : The Ajax Comment Form CST plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing or incorrect nonce validation via the 'acform_cst_settings' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T10:49:33.000000Z"}, {"uuid": "5cef2814-080a-4370-8280-6808f5eb9fae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38676", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10", "content": "", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}, {"uuid": "54af112b-622e-466a-89ad-fd541e0873b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38670", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10", "content": "", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}, {"uuid": "2bb3763a-b2af-483a-80e1-3b5ecf7ae244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38677", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10", "content": "", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}, {"uuid": "379cd62d-0d29-4771-bd09-00b2ebe097fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38679", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10", "content": "", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}]}