{"metadata": {"vulnerability": "CVE-2014-125134", "count": 20, "kinds": {"milestone": 4, "sighting": 2, "kev": 5, "other": 9}}, "data": [{"timestamp": "2014-12-07T00:00:00Z", "date_only": false, "value": "2014-12-07T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2014-125134", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-14T20:25:22.925Z", "date_only": false, "value": "2026-10-14T20:25:22.925Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2014-125134", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-20T20:31:23.591Z", "date_only": false, "value": "2026-10-20T20:31:23.591Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2014-125134", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-20T20:31:23.591Z", "date_only": false, "value": "2026-10-20T20:31:23.591Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2014-125134", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-20T20:40:23Z", "date_only": false, "value": "2026-10-20T20:40:23+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2014-125134", "field": "timestamps.asserted_at", "uuid": "ffd02425-feae-476a-8f24-378e7a85325a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T20:40:23Z", "date_only": false, "value": "2026-10-20T20:40:23+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2014-125134", "field": "timestamps.first_seen_at", "uuid": "ffd02425-feae-476a-8f24-378e7a85325a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T20:40:23Z", "date_only": false, "value": "2026-10-20T20:40:23+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2014-125134", "field": "status.status_updated_at", "uuid": "ffd02425-feae-476a-8f24-378e7a85325a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T20:40:23.797Z", "date_only": false, "value": "2026-10-20T20:40:23.797Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2014-125134", "field": "evidence.0.details.added_date", "uuid": "ffd02425-feae-476a-8f24-378e7a85325a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T20:43:22.597Z", "date_only": false, "value": "2026-10-20T20:43:22.597050Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117475180679697367", "record": "CVE-2014-125134", "field": "creation_timestamp", "uuid": "58160e0b-c1a6-4e27-b768-a99b42b0ee48", "content": "CVE-2014-125134 ChurcHope WordPress Theme < 2.2 Path Traversal via downloadlink.php ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the 'file' parameter of /wp-content/themes/churchope/lib/downloadlink.php. Attackers can supply directory traversal sequences to read sensitive files like wp-config.php or /etc/passwd, exposing database credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-18.\nhttps://www.cve.org/CVERecord?id=CVE-2014-125134https://wpscan.com/vulnerability/3c5833bd-1fe0-4eba-97aa-7d3a0c8fda15https://packetstorm.news/files/id/129706/https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/churchope-lfi.yamlhttps://web.archive.org/web/20220629224817/https://www.cloudways.com/en/best-wordpress-themes/nonprofit/churchhttps://www.vulncheck.com/advisories/churchope-wordpress-theme-2.2-path-traversal-via-downloadlink-php#ChurcHope#CVE_2014_125134#bot", "url": "https://infosec.exchange/users/cve/statuses/117475180679697367"}, {"timestamp": "2026-10-20T21:17:12Z", "date_only": false, "value": "2026-10-20T21:17:12Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-949V-G35Q-94PH", "record": "GHSA-949V-G35Q-94PH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-20T21:17:12.720Z", "date_only": false, "value": "2026-10-20T21:17:12.720", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2014-125134", "record": "FKIE_CVE-2014-125134", "field": "published"}, {"timestamp": "2026-10-20T21:31:04Z", "date_only": false, "value": "2026-10-20T21:31:04Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-949V-G35Q-94PH", "record": "GHSA-949V-G35Q-94PH", "field": "published"}, {"timestamp": "2026-10-20T21:31:04Z", "date_only": false, "value": "2026-10-20T21:31:04Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-949V-G35Q-94PH", "record": "GHSA-949V-G35Q-94PH", "field": "modified"}, {"timestamp": "2026-10-21T21:00:01Z", "date_only": false, "value": "2026-10-21T21:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2014-125134", "field": "timestamps.recorded_at", "uuid": "ffd02425-feae-476a-8f24-378e7a85325a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T21:00:38.160Z", "date_only": false, "value": "2026-10-21T21:00:38.160263Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ffd02425-feae-476a-8f24-378e7a85325a", "record": "CVE-2014-125134", "field": "creation_timestamp", "uuid": "665d59d8-c00f-498d-9b6d-c7ab7dfd77f9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ffd02425-feae-476a-8f24-378e7a85325a"}, {"timestamp": "2026-10-23T02:07:29.343Z", "date_only": false, "value": "2026-10-23T02:07:29.343542Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2014-125134", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-23T02:07:29.343Z", "date_only": false, "value": "2026-10-23T02:07:29.343542Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2014-125134", "record": "FKIE_CVE-2014-125134", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-23T02:07:38.560Z", "date_only": false, "value": "2026-10-23T02:07:38.560Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2014-125134", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-23T02:07:38.560Z", "date_only": false, "value": "2026-10-23T02:07:38.560Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2014-125134", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-23T03:16:29.903Z", "date_only": false, "value": "2026-10-23T03:16:29.903", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2014-125134", "record": "FKIE_CVE-2014-125134", "field": "lastModified"}]}