{"metadata": {"vulnerability": "CVE-2024-44000", "count": 53, "kinds": {"milestone": 4, "sighting": 40, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-08-18T21:57:37.333Z", "date_only": false, "value": "2024-08-18T21:57:37.333Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-44000", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-09-05T14:18:45Z", "date_only": false, "value": "2024-09-05T14:18:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/4554", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "e6b2bdee-a2cd-40dc-ab53-7603f1551fbe", "content": "CVE-2024-44000: Unauthenticated Account Takeover in LiteSpeed Cache plugin for WordPress, 9.8 rating \n\nA vulnerability in the debug log allows attackers to gain access to user sessions, potentially leading to complete control over a website.\n\nSearch at Netlas.io:\n Link: https://nt.ls/syLAy\n Dork: http.body:\"plugins/litespeed-cache\"\n\nRead more: https://securityonline.info/cve-2024-44000-cvss-9-8-litespeed-cache-flaw-exposes-millions-of-wordpress-sites-to-takeover-attacks/", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/4554", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-05T16:31:47Z", "date_only": false, "value": "2024-09-05T16:31:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/iqzr0evsZIMMy3NnASIGxZl2nBENTlvbGPIFKVphLoM3UsM", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "4f792c29-31fa-49e6-a02f-35766dcd465a", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-06T03:57:32Z", "date_only": false, "value": "2024-09-06T03:57:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8462", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "d33c93e0-8a35-4617-8d48-df716b707715", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aAutomated PHP remote code execution scanner for CVE-2024-4577\nURL\uff1ahttps://github.com/absholi7ly/CVE-2024-44000-LiteSpeed-Cache\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8462", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-06T10:43:14Z", "date_only": false, "value": "2024-09-06T10:43:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tengkorakcybercrewz/19765", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "6fc7d22a-c5a2-4bf7-abb2-2cd403b4d77c", "content": "The Hacker News\nCritical Security Flaw Found in LiteSpeed Cache Plugin for WordPress\n\nCybersecurity researchers have discovered yet another critical security flaw in the LiteSpeed Cache plugin for WordPress that could allow unauthenticated users to take control of arbitrary accounts.\nThe vulnerability, tracked as CVE-2024-44000 (CVSS score: 7.5), impacts versions before and including 6.4.1. It has been addressed in version 6.5.0.1. \n\"The plugin suffers from an", "url": "https://t.me/tengkorakcybercrewz/19765"}, {"timestamp": "2024-09-06T10:43:14Z", "date_only": false, "value": "2024-09-06T10:43:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tengkorakcybercrewz/3988", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "c030c5c9-756f-4e36-b975-465f35b2e33c", "content": "The Hacker News\nCritical Security Flaw Found in LiteSpeed Cache Plugin for WordPress\n\nCybersecurity researchers have discovered yet another critical security flaw in the LiteSpeed Cache plugin for WordPress that could allow unauthenticated users to take control of arbitrary accounts.\nThe vulnerability, tracked as CVE-2024-44000 (CVSS score: 7.5), impacts versions before and including 6.4.1. It has been addressed in version 6.5.0.1. \n\"The plugin suffers from an", "url": "https://t.me/tengkorakcybercrewz/3988"}, {"timestamp": "2024-09-06T10:43:16Z", "date_only": false, "value": "2024-09-06T10:43:16.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ps-VKN7DUelYkabx9tAVrWbeJ-AoGkZyCUEtr_LLfMOyIQ", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "8a3b0a01-fe17-48cb-9ea5-5384095a7b6f"}, {"timestamp": "2024-09-06T11:38:55Z", "date_only": false, "value": "2024-09-06T11:38:55.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/iiRfbkOGKtpnvYek2Bt69TLmk7TsVdpcWhjd4Wgzl0X5ng", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "c95b7b3c-5c1f-4c95-8cb2-dcfc681f5fad"}, {"timestamp": "2024-09-06T12:40:36Z", "date_only": false, "value": "2024-09-06T12:40:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/5533", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "b441a34b-60be-4dae-aeb3-189d9f20f1e3", "content": "New LiteSpeed Cache flaw (CVE-2024-44000) risks unauthorized access to WordPress sites via exposed debug logs.\n\nRead: https://thehackernews.com/2024/09/critical-security-flaw-found-in.html\n\nEven old logs can be exploited. Update and purge now!", "url": "https://t.me/thehackernews/5533"}, {"timestamp": "2024-09-06T16:54:22Z", "date_only": false, "value": "2024-09-06T16:54:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsec_news/4674", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "287bccf5-122b-48e8-a34a-f83593ab865f", "content": "\u200b\u26a1\ufe0fCVE-2024-44000: \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d \u0434\u043b\u044f WordPress \u0432\u043d\u043e\u0432\u044c \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043f\u043e\u0434 \u0443\u0434\u0430\u0440\u043e\u043c\n\n\ud83d\udcac \u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 LiteSpeed Cache \u0434\u043b\u044f WordPress \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 CVE-2024-44000 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0432 7.5 \u0431\u0430\u043b\u043b\u043e\u0432, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 6.4.1 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Patchstack \u0420\u0430\u0444\u0438 \u041c\u0443\u0445\u0430\u043c\u043c\u0430\u0434 \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u0432 \u0441\u0432\u043e\u0451\u043c \u043e\u0442\u0447\u0451\u0442\u0435, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u043d\u0430 \u0441\u0430\u0439\u0442 \u0438 \u043f\u0440\u043e\u0447\u0438\u043c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f\u043c.\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u043b \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0443 \u0436\u0443\u0440\u043d\u0430\u043b\u0430 \u043e\u0442\u043b\u0430\u0434\u043a\u0438 \u00ab/wp-content/debug.log\u00bb, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u0441\u044f \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e cookie \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0430\u043d\u0441\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u042d\u0442\u043e \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u043d\u043e\u0441\u0438\u0442 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u043f\u043e\u0432\u0441\u0435\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b, \u0442\u0430\u043a \u043a\u0430\u043a \u0434\u043b\u044f \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0431\u044b\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u043e\u0442\u043b\u0430\u0434\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u044b\u043a\u043b\u044e\u0447\u0435\u043d\u0430. \u041e\u0434\u043d\u0430\u043a\u043e, \u0441\u0430\u0439\u0442\u044b, \u0433\u0434\u0435 \u044d\u0442\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0431\u044b\u043b\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0440\u0430\u043d\u0435\u0435 \u0438 \u0444\u0430\u0439\u043b \u0436\u0443\u0440\u043d\u0430\u043b\u0430 \u043d\u0435 \u0431\u044b\u043b \u0443\u0434\u0430\u043b\u0451\u043d, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0440\u0438\u0441\u043a\u0443.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 LiteSpeed Cache 6.5.0.1 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0430\u0435\u0442 \u0444\u0430\u0439\u043b \u0436\u0443\u0440\u043d\u0430\u043b\u0430 \u0432 \u043d\u043e\u0432\u0443\u044e \u043f\u0430\u043f\u043a\u0443, \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442 \u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430 \u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044c \u0434\u0430\u043d\u043d\u044b\u0445 \u043e cookie. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0444\u0430\u0439\u043b\u0430 \u00ab/wp-content/debug.log\u00bb \u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0435\u0433\u043e, \u0435\u0441\u043b\u0438 \u043e\u0442\u043b\u0430\u0434\u043a\u0430 \u0431\u044b\u043b\u0430 \u043a\u043e\u0433\u0434\u0430-\u043b\u0438\u0431\u043e \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0432 \u00ab.htaccess\u00bb, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0436\u0443\u0440\u043d\u0430\u043b\u0430. \u042d\u0442\u043e \u0441\u043d\u0438\u0437\u0438\u0442 \u0440\u0438\u0441\u043a, \u0435\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u0433\u0430\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u043e\u0435 \u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430 \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u043f\u043e\u0434\u0431\u043e\u0440\u0430. \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-44000 \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u044e\u0442 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043e\u0442\u043b\u0430\u0434\u043a\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u043c\u0438, \u0447\u0442\u043e\u0431\u044b \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 LiteSpeed Cache \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u043c\u0435\u0441\u044f\u0446. \u0422\u0430\u043a, \u0440\u0430\u043d\u0435\u0435 \u043c\u044b \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-28000, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f 5 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/4674"}, {"timestamp": "2024-09-06T17:07:01Z", "date_only": false, "value": "2024-09-06T17:07:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KomunitiSiber/2524", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "ec39867d-536b-4fc7-8fdb-b612b1eeb796", "content": "Critical Security Flaw Found in LiteSpeed Cache Plugin for WordPress\nhttps://thehackernews.com/2024/09/critical-security-flaw-found-in.html\n\nCybersecurity researchers have discovered yet another critical security flaw in the LiteSpeed Cache plugin for WordPress that could allow unauthenticated users to take control of arbitrary accounts.\nThe vulnerability, tracked as CVE-2024-44000 (CVSS score: 7.5), impacts versions before and including 6.4.1. It has been addressed in version 6.5.0.1.\u00a0\n\"The plugin suffers from an", "url": "https://t.me/KomunitiSiber/2524"}, {"timestamp": "2024-09-08T17:47:59Z", "date_only": false, "value": "2024-09-08T17:47:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/12450", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "80a2383a-1892-457e-9d71-a3358f1ad855", "content": "\u200aCVE-2024-44000 (CVSS 9.8): Litespeed Cache flaw exposes millions of WordPress sites to takeover attacks\n\nhttps://securityonline.info/cve-2024-44000-cvss-9-8-litespeed-cache-flaw-exposes-millions-of-wordpress-sites-to-takeover-attacks/", "url": "https://t.me/HackingInsights/12450", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-09T14:31:10Z", "date_only": false, "value": "2024-09-09T14:31:10.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/tVTL6_oBQTN-MPg3AZJxeqt1QJ_avoYVCvaCVHQqJMgjt1ea", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "ae9b4e46-ad73-4312-96fd-3ca21558b1f1"}, {"timestamp": "2024-09-10T04:33:38Z", "date_only": false, "value": "2024-09-10T04:33:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8461", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "783b9c96-e990-43b5-8311-554691f07806", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aAutomated PHP remote code execution scanner for CVE-2024-4577\nURL\uff1ahttps://github.com/absholi7ly/LiteSpeed-Cache-CVE-2024-44000-\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8461", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-16T14:20:21Z", "date_only": false, "value": "2024-09-16T14:20:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8538", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "6ccff7bb-d2fc-4455-a6e1-e74058f1c933", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-44000-LiteSpeed-Cache\nURL\uff1ahttps://github.com/ifqygazhar/CVE-2024-44000-LiteSpeed-Cache\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8538", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-17T11:15:03Z", "date_only": false, "value": "2024-09-17T11:15:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_litespeed_cookie_theft.rb", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "8fdc938a-4f2c-417c-82a6-706425936d04", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_litespeed_cookie_theft.rb"}, {"timestamp": "2024-09-19T04:11:49Z", "date_only": false, "value": "2024-09-19T04:11:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3192", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "bafc935b-b69e-413d-9776-23e09137a89d", "content": "https://github.com/ifqygazhar/CVE-2024-44000-LiteSpeed-Cache\n\nCVE-2024-44000 is a vulnerability in LiteSpeed Cache, a popular WordPress plug-in.\n#github #exploit", "url": "https://t.me/CNArsenal/3192", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-19T07:50:04Z", "date_only": false, "value": "2024-09-19T07:50:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/18785", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "a0dc9558-1a73-4799-b8cf-a8028f257e3d", "content": "https://github.com/ifqygazhar/CVE-2024-44000-LiteSpeed-Cache\n\nCVE-2024-44000 is a vulnerability in LiteSpeed Cache, a popular WordPress plug-in.\n#github #exploit", "url": "https://t.me/realLulzSec/18785", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-19T07:50:04Z", "date_only": false, "value": "2024-09-19T07:50:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/2026", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "67517298-8e66-4db9-9ff9-dfcb7e96289c", "content": "https://github.com/ifqygazhar/CVE-2024-44000-LiteSpeed-Cache\n\nCVE-2024-44000 is a vulnerability in LiteSpeed Cache, a popular WordPress plug-in.\n#github #exploit", "url": "https://t.me/realLulzSec/2026", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-12T06:30:24Z", "date_only": false, "value": "2024-10-12T06:30:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/15736", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "dce2ec98-55a1-4c68-8264-933ea30e3d5c", "content": "CVE-2024-44000 - WordPress Debug Log Exposure Leading to Session Cookie Hijacking: https://infosecwriteups.com/cve-2024-44000-wordpress-debug-log-exposure-leading-to-session-cookie-hijacking-afcfada02c44?source=rss------bug_bounty-5", "url": "https://t.me/HackingInsights/15736", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-20T11:26:22.948Z", "date_only": false, "value": "2024-10-20T11:26:22.948Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-44000", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-10-20T12:15:03Z", "date_only": false, "value": "2024-10-20T12:15:03Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RH5M-MW2H-V9RV", "record": "GHSA-RH5M-MW2H-V9RV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-10-20T12:15:03.287Z", "date_only": false, "value": "2024-10-20T12:15:03.287", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-44000", "record": "FKIE_CVE-2024-44000", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-10-20T12:30:30Z", "date_only": false, "value": "2024-10-20T12:30:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RH5M-MW2H-V9RV", "record": "GHSA-RH5M-MW2H-V9RV", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-10-20T14:55:29Z", "date_only": false, "value": "2024-10-20T14:55:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/8441", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "c557cf05-0a66-4d6a-897e-1bcfba5ec611", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-44000 - LiteSpeed Technologies LiteSpeed Cache Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-44000 \nPublished : Oct. 20, 2024, 12:15 p.m. | 35\u00a0minutes ago \nDescription : Insufficiently Protected Credentials vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Authentication Bypass.This issue affects LiteSpeed Cache: from n/a before 6.5.0.1. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/8441"}, {"timestamp": "2024-10-21T19:09:19.973Z", "date_only": false, "value": "2024-10-21T19:09:19.973432Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-44000", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-21T19:09:19.973Z", "date_only": false, "value": "2024-10-21T19:09:19.973432Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-44000", "record": "FKIE_CVE-2024-44000", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-21T19:11:21.875Z", "date_only": false, "value": "2024-10-21T19:11:21.875Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-44000", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-24T13:07:13Z", "date_only": false, "value": "2024-10-24T13:07:13.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d6639616-08d7-4807-9d94-ef5575e155f4", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "ec92fe07-5ef4-40e8-80b4-3783f4985416"}, {"timestamp": "2024-10-31T11:07:41Z", "date_only": false, "value": "2024-10-31T11:07:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8900", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "37791733-eb9a-49d7-a357-8d0a882da138", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-44000\nURL\uff1ahttps://github.com/zgimszhd61/CVE-2024-44000\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8900", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-06T03:13:46Z", "date_only": false, "value": "2025-02-06T03:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "e8f6dbb4-0bcb-41de-807e-31aa2f9c3e60"}, {"timestamp": "2025-02-23T04:11:03Z", "date_only": false, "value": "2025-02-23T04:11:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "982ddcbd-e618-4d77-baff-f61b300eef84"}, {"timestamp": "2025-03-28T00:00:00Z", "date_only": false, "value": "2025-03-28T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/52099", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "cc8557df-f1fb-4ca5-9f2a-a96c2cfde03e", "url": "https://www.exploit-db.com/exploits/52099", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-28T15:11:35.156Z", "date_only": false, "value": "2025-03-28T15:11:35.156123Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3llh3yaimss2e", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "92cc0614-b907-40ff-9dad-7a36d850e37a", "url": "https://bsky.app/profile/nimblenerd.social/post/3llh3yaimss2e"}, {"timestamp": "2025-03-29T21:02:06.065Z", "date_only": false, "value": "2025-03-29T21:02:06.065268Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llk7zvgdkv2n", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "9b5b51e0-d818-4ea9-aa64-fecb148305d8", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llk7zvgdkv2n"}, {"timestamp": "2025-10-23T21:13:03Z", "date_only": false, "value": "2025-10-23T21:13:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "82b57456-ef73-43e4-8b15-54cc43d3cf85"}, {"timestamp": "2026-04-01T16:27:37.724Z", "date_only": false, "value": "2026-04-01T16:27:37.724Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Patchstack", "record": "CVE-2024-44000", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-01T18:32:09Z", "date_only": false, "value": "2026-04-01T18:32:09Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RH5M-MW2H-V9RV", "record": "GHSA-RH5M-MW2H-V9RV", "field": "modified"}, {"timestamp": "2026-04-02T01:40:09.565Z", "date_only": false, "value": "2026-04-02T01:40:09.565283Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mii35wqqtw27", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "c6d3f915-f31f-4574-861e-2ae16273ba92", "url": "https://bsky.app/profile/cyberhub.blog/post/3mii35wqqtw27"}, {"timestamp": "2026-04-28T16:10:15.844Z", "date_only": false, "value": "2026-04-28T16:10:15.844Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-44000", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-28T16:10:15.844Z", "date_only": false, "value": "2026-04-28T16:10:15.844Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Patchstack", "record": "CVE-2024-44000", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:52:08.170Z", "date_only": false, "value": "2026-06-17T07:52:08.170", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-44000", "record": "FKIE_CVE-2024-44000", "field": "lastModified"}, {"timestamp": "2026-07-09T03:00:12.706Z", "date_only": false, "value": "2026-07-09T03:00:12.706843Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/889", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "f238a0e2-e866-4284-9040-5dda37a6e0d4", "content": "CVE-2024-44000: Unauthenticated Account Takeover in LiteSpeed Cache plugin for WordPress, 9.8 rating \ud83d\udd25\n\nA vulnerability in the debug log allows attackers to gain access to user sessions, potentially leading to complete control over a website.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/syLAy\n\ud83d\udc49 Dork: http.body:\"plugins/litespeed-cache\"\n\nRead more: https://securityonline.info/cve-2024-44000-cvss-9-8-litespeed-cache-flaw-exposes-millions-of-wordpress-sites-to-takeover-attacks/", "url": "https://t.me/brutsecurity/889"}, {"timestamp": "2026-07-11T17:00:04.184Z", "date_only": false, "value": "2026-07-11T17:00:04.184892Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/889", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "5593a70f-ee4e-4ae0-a8d4-d4893c583fc5", "content": "CVE-2024-44000: Unauthenticated Account Takeover in LiteSpeed Cache plugin for WordPress, 9.8 rating \ud83d\udd25\n\nA vulnerability in the debug log allows attackers to gain access to user sessions, potentially leading to complete control over a website.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/syLAy\n\ud83d\udc49 Dork: http.body:\"plugins/litespeed-cache\"\n\nRead more: https://securityonline.info/cve-2024-44000-cvss-9-8-litespeed-cache-flaw-exposes-millions-of-wordpress-sites-to-takeover-attacks/", "url": "https://t.me/brutsecurity/889", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-22T15:19:15.186Z", "date_only": false, "value": "2026-07-22T15:19:15.186401Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/greynoise/statuses/116964298203115730", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "17ed9811-5d37-4da9-a374-77fc79ba6293", "content": "This week in GreyNoise data, rented crawlers probed for credentials and configuration secrets across widely deployed web software.\nA matched pair of crawlers sharing one client fingerprint probed NGINX UI (CVE-2026-27944) and LiteSpeed Cache (CVE-2024-44000), two CVSS 9.8 flaws that leak credentials, private keys, or session material, from two different hosting providers. \nAlongside them, an RDP brute force cohort spread across three networks under one transport fingerprint. WordPress core SQL injection CVE-2026-60137 also entered the CISA KEV catalog this week. The rented hosts rotate; the fingerprints persist.\nCustomers get the full weekly brief. Our public At The Edge one-pager \ud83d\udc49https://www.greynoise.io/resources/at-the-edge-clear-072026", "url": "https://infosec.exchange/users/greynoise/statuses/116964298203115730"}, {"timestamp": "2026-09-01T20:00:29.880Z", "date_only": false, "value": "2026-09-01T20:00:29.880401Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/145136", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "2cef030c-f442-4c29-a534-ac6e0b4e44b6", "content": "CVE-2024-44000 - WordPress Debug Log Exposure Leading to Session Cookie Hijacking\n\nCVE-2024\u201344000 OverviewContinue reading on InfoSec Write-ups \u00bb\nRead more...", "url": "https://t.me/hacking_Attack/145136"}, {"timestamp": "2026-09-01T20:00:30.027Z", "date_only": false, "value": "2026-09-01T20:00:30.027474Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/144187", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "2fbea03b-c9df-4f0b-9025-41ead26a3761", "content": "CVE-2024-44000 - WordPress Debug Log Exposure Leading to Session Cookie Hijacking\nhttps://infosecwriteups.com/cve-2024-44000-wordpress-debug-log-exposure-leading-to-session-cookie-hijacking-afcfada02c44?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/144187"}, {"timestamp": "2026-09-01T20:00:30.092Z", "date_only": false, "value": "2026-09-01T20:00:30.092673Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/144189", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "6e9de981-b1f2-4480-942f-03878c76a52a", "content": "CVE-2024\u201344000 OverviewContinue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/cve-2024-44000-wordpress-debug-log-exposure-leading-to-session-cookie-hijacking-afcfada02c44?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/144189"}, {"timestamp": "2026-09-01T20:00:30.301Z", "date_only": false, "value": "2026-09-01T20:00:30.301037Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/144186", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "af124c76-09c4-4d80-a922-845b4c0b3f5a", "content": "CVE-2024-44000 - WordPress Debug Log Exposure Leading to Session Cookie Hijacking\n\nCVE-2024\u201344000 OverviewContinue reading on InfoSec Write-ups \u00bb\nRead more...", "url": "https://t.me/hacking_Attack/144186"}, {"timestamp": "2026-09-03T16:00:05.727Z", "date_only": false, "value": "2026-09-03T16:00:05.727538Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/144189", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "bdf8cd2e-99d3-45a1-bd5b-c968fbb9359a", "content": "CVE-2024\u201344000 OverviewContinue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/cve-2024-44000-wordpress-debug-log-exposure-leading-to-session-cookie-hijacking-afcfada02c44?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/144189", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T16:00:05.778Z", "date_only": false, "value": "2026-09-03T16:00:05.778816Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/144187", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "ca2a8439-738e-4724-b920-eb7d0cdbde3e", "content": "CVE-2024-44000 - WordPress Debug Log Exposure Leading to Session Cookie Hijacking\nhttps://infosecwriteups.com/cve-2024-44000-wordpress-debug-log-exposure-leading-to-session-cookie-hijacking-afcfada02c44?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/144187", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-15T11:00:12Z", "date_only": false, "value": "2026-10-15T11:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/khTZsALE2II3wUY8-RLhLlDSvaHg-p4G-Gpmw2tuwG0CNoo", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "ea260768-d536-4119-9941-25cd4da09ba8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-15T11:00:12Z", "date_only": false, "value": "2026-10-15T11:00:12.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/khTZsALE2II3wUY8-RLhLlDSvaHg-p4G-Gpmw2tuwG0CNoo", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "7be74e2c-a061-4e2e-8196-1f6f13ea23e2"}], "metrics": {"as_of": "2026-11-01T04:15:46.092Z", "anchors": {"origin": {"timestamp": "2024-10-20T11:26:22.948Z", "date_only": false, "value": "2024-10-20T11:26:22.948Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-44000", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-10-20T11:26:22.948Z", "date_only": false, "value": "2024-10-20T11:26:22.948Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-44000", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2024-09-05T14:18:45Z", "date_only": false, "value": "2024-09-05T14:18:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/4554", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "e6b2bdee-a2cd-40dc-ab53-7603f1551fbe", "content": "CVE-2024-44000: Unauthenticated Account Takeover in LiteSpeed Cache plugin for WordPress, 9.8 rating \n\nA vulnerability in the debug log allows attackers to gain access to user sessions, potentially leading to complete control over a website.\n\nSearch at Netlas.io:\n Link: https://nt.ls/syLAy\n Dork: http.body:\"plugins/litespeed-cache\"\n\nRead more: https://securityonline.info/cve-2024-44000-cvss-9-8-litespeed-cache-flaw-exposes-millions-of-wordpress-sites-to-takeover-attacks/", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/4554", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -3877657.948, "hours": -1077.1272077777778, "days": -44.88030032407407, "min_seconds": -3877657.948, "max_seconds": -3877657.948, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2024-10-20T11:26:22.948Z", "date_only": false, "value": "2024-10-20T11:26:22.948Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-44000", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-09-05T14:18:45Z", "date_only": false, "value": "2024-09-05T14:18:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/4554", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "e6b2bdee-a2cd-40dc-ab53-7603f1551fbe", "content": "CVE-2024-44000: Unauthenticated Account Takeover in LiteSpeed Cache plugin for WordPress, 9.8 rating \n\nA vulnerability in the debug log allows attackers to gain access to user sessions, potentially leading to complete control over a website.\n\nSearch at Netlas.io:\n Link: https://nt.ls/syLAy\n Dork: http.body:\"plugins/litespeed-cache\"\n\nRead more: https://securityonline.info/cve-2024-44000-cvss-9-8-litespeed-cache-flaw-exposes-millions-of-wordpress-sites-to-takeover-attacks/", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/4554", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 64082963.144021, "hours": 17800.823095561387, "days": 741.7009623150578, "min_seconds": 64082963.144021, "max_seconds": 64082963.144021, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-10-20T11:26:22.948Z", "date_only": false, "value": "2024-10-20T11:26:22.948Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-44000", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-01T04:15:46.092Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 67960621.092021, "hours": 18877.950303339167, "days": 786.581262639132, "min_seconds": 67960621.092021, "max_seconds": 67960621.092021, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-09-05T14:18:45Z", "date_only": false, "value": "2024-09-05T14:18:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/4554", "record": "CVE-2024-44000", "field": "creation_timestamp", "uuid": "e6b2bdee-a2cd-40dc-ab53-7603f1551fbe", "content": "CVE-2024-44000: Unauthenticated Account Takeover in LiteSpeed Cache plugin for WordPress, 9.8 rating \n\nA vulnerability in the debug log allows attackers to gain access to user sessions, potentially leading to complete control over a website.\n\nSearch at Netlas.io:\n Link: https://nt.ls/syLAy\n Dork: http.body:\"plugins/litespeed-cache\"\n\nRead more: https://securityonline.info/cve-2024-44000-cvss-9-8-litespeed-cache-flaw-exposes-millions-of-wordpress-sites-to-takeover-attacks/", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/4554", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-01T04:15:46.092Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}