{"metadata": {"vulnerability": "CVE-2024-8522", "count": 47, "kinds": {"milestone": 4, "sighting": 23, "kev": 11, "other": 9}}, "data": [{"timestamp": "2024-09-06T15:23:41.132Z", "date_only": false, "value": "2024-09-06T15:23:41.132Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-8522", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-09-11T00:00:00Z", "date_only": false, "value": "2024-09-11T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2024-8522", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2024-09-12T08:30:46Z", "date_only": false, "value": "2024-09-12T08:30:46+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-8522", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "f7604c31-f056-48ca-9024-dfa8ddd3a99b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-12T08:30:46Z", "date_only": false, "value": "2024-09-12T08:30:46.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-8522", "field": "evidence.0.details.added_date", "uuid": "f7604c31-f056-48ca-9024-dfa8ddd3a99b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-12T08:30:46Z", "date_only": false, "value": "2024-09-12T08:30:46+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-8522", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "f7604c31-f056-48ca-9024-dfa8ddd3a99b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-12T08:30:46Z", "date_only": false, "value": "2024-09-12T08:30:46+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-8522", "field": "status.status_updated_at", "uuid": "f7604c31-f056-48ca-9024-dfa8ddd3a99b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-12T08:30:46.615Z", "date_only": false, "value": "2024-09-12T08:30:46.615Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-8522", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-09-12T09:15:05Z", "date_only": false, "value": "2024-09-12T09:15:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3W3R-R6G6-W8X5", "record": "GHSA-3W3R-R6G6-W8X5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-09-12T09:15:05.480Z", "date_only": false, "value": "2024-09-12T09:15:05.480", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-8522", "record": "FKIE_CVE-2024-8522", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-09-12T09:31:21Z", "date_only": false, "value": "2024-09-12T09:31:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3W3R-R6G6-W8X5", "record": "GHSA-3W3R-R6G6-W8X5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-09-12T10:08:54Z", "date_only": false, "value": "2024-09-12T10:08:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/12853", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "cfb94ab4-92f9-4aaf-b3c0-9c09e34a9e5a", "content": "\u200aCVE-2024-8522 (CVSS 10): LearnPress SQLi Flaw Leaves 90K+ WordPress Sites at Risk\n\nhttps://securityonline.info/cve-2024-8522-cvss-10-learnpress-sqli-flaw-leaves-90k-wordpress-sites-at-risk/", "url": "https://t.me/HackingInsights/12853", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-12T11:51:18Z", "date_only": false, "value": "2024-09-12T11:51:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/5456", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "6079ec9f-3746-4982-97a1-1ff1ff088bf2", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-8522 - LearnPress WordPress LMS Plugin SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-8522 \nPublished : Sept. 12, 2024, 9:15 a.m. | 26\u00a0minutes ago \nDescription : The LearnPress \u2013 WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_only_fields' parameter of the /wp-json/learnpress/v1/courses REST API endpoint in all versions up to, and including, 4.2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 10.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/5456"}, {"timestamp": "2024-09-12T13:06:52.313Z", "date_only": false, "value": "2024-09-12T13:06:52.313488Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-8522", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-09-12T13:06:52.313Z", "date_only": false, "value": "2024-09-12T13:06:52.313488Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-8522", "record": "FKIE_CVE-2024-8522", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-09-12T13:07:40.179Z", "date_only": false, "value": "2024-09-12T13:07:40.179Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-8522", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-13T05:01:21Z", "date_only": false, "value": "2024-09-13T05:01:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/630", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "bb4df60c-f414-4b1b-b1b3-aa8392ea2d2d", "content": "\u26a1\ufe0fWordPress LMS Plugin plugin for WordPress, vulnerable to SQL injection. CVE-2024-8529 & CVE-2024-8522.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/630"}, {"timestamp": "2024-09-13T05:21:09Z", "date_only": false, "value": "2024-09-13T05:21:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDilara/873", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "6b825a85-7be3-42e3-9779-8c0b7d8b51db", "content": "\u26a1\ufe0fWordPress LMS Plugin plugin for WordPress, vulnerable to SQL injection. CVE-2024-8529 & CVE-2024-8522.\n\n#CyberBulletin", "url": "https://t.me/CyberDilara/873"}, {"timestamp": "2024-09-13T05:21:16Z", "date_only": false, "value": "2024-09-13T05:21:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/InfoSecInsider/23770", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "de5b03f2-f235-4270-b676-785fbd67f2c8", "content": "\u26a1\ufe0fWordPress LMS Plugin plugin for WordPress, vulnerable to SQL injection. CVE-2024-8529 & CVE-2024-8522.\n\n#CyberBulletin", "url": "https://t.me/InfoSecInsider/23770"}, {"timestamp": "2024-09-13T05:21:16Z", "date_only": false, "value": "2024-09-13T05:21:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/InfoSecInsider/282", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "515255c3-f534-4f30-bc75-88540e44f9fe", "content": "\u26a1\ufe0fWordPress LMS Plugin plugin for WordPress, vulnerable to SQL injection. CVE-2024-8529 & CVE-2024-8522.\n\n#CyberBulletin", "url": "https://t.me/InfoSecInsider/282"}, {"timestamp": "2024-09-14T06:41:50Z", "date_only": false, "value": "2024-09-14T06:41:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/InfoSecInsider/23773", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "8858e658-82fd-4e30-a415-8b12a18ddeb2", "content": "\u26a1\ufe0fWordPress LMS Plugin plugin for WordPress, vulnerable to SQL injection. CVE-2024-8529 & CVE-2024-8522.\n\n#CyberBulletin", "url": "https://t.me/InfoSecInsider/23773"}, {"timestamp": "2024-09-14T06:41:56Z", "date_only": false, "value": "2024-09-14T06:41:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/InfoSecInsider/285", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "faf5fdcc-2ef0-482e-9d12-7d7b9d324e39", "content": "\u26a1\ufe0fWordPress LMS Plugin plugin for WordPress, vulnerable to SQL injection. CVE-2024-8529 & CVE-2024-8522.\n\n#CyberBulletin", "url": "https://t.me/InfoSecInsider/285"}, {"timestamp": "2024-09-15T15:58:02Z", "date_only": false, "value": "2024-09-15T15:58:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/662", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "fbcbba06-c6f6-4a18-bc0c-c8cf37a0b2dc", "content": "\u26a1\ufe0fWordPress LMS Plugin plugin for WordPress, vulnerable to SQL injection. CVE-2024-8529 & CVE-2024-8522.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/662"}, {"timestamp": "2024-09-21T03:04:07Z", "date_only": false, "value": "2024-09-21T03:04:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/25500", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "b69b3815-9a48-4726-bc23-7020c62bd9d3", "content": "\u26a1\ufe0fWordPress LMS Plugin plugin for WordPress, vulnerable to SQL injection. CVE-2024-8529 & CVE-2024-8522.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/25500"}, {"timestamp": "2024-09-23T07:17:07Z", "date_only": false, "value": "2024-09-23T07:17:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3207", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "e976831b-4390-4ec1-8ba1-d08937f3855d", "content": "cve-2024-8522\n\nGET /wp-json/learnpress/v1/courses?c_only_fields=IF(COUNT(*)!=-2,(SLEEP(10)),0) HTTP/1.1\n\n#exploit #poc", "url": "https://t.me/CNArsenal/3207", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-23T09:31:41Z", "date_only": false, "value": "2024-09-23T09:31:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/422", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "b71d6986-954e-4c82-a74a-72e85e433e0b", "content": "#tools\n#Offensive_security\n1. Proroute H685 4G router vulnerabilities\nhttps://www.pentestpartners.com/security-blog/proroute-h685-4g-router-vulnerabilities\n\n2. CVE-2024-8522:\nWP LMS Plugin <= 4.2.7 - Unauth SQLI via 'c_only_fields'\nhttps://github.com/Avento/CVE-2024-8522", "url": "https://t.me/HackerArsenal/422", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-23T17:58:32Z", "date_only": false, "value": "2024-09-23T17:58:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11175", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "55b8b5cb-62be-4d2c-b24a-3784f4c39358", "content": "#tools\n#Offensive_security\n1. Proroute H685 4G router vulnerabilities\nhttps://www.pentestpartners.com/security-blog/proroute-h685-4g-router-vulnerabilities\n\n2. CVE-2024-8522:\nWP LMS Plugin <= 4.2.7 - Unauth SQLI via 'c_only_fields'\nhttps://github.com/Avento/CVE-2024-8522\n\n3. CVE-2024-27394:\nTCP-AO UAF\nhttps://blog.theori.io/deep-dive-into-rcu-race-condition-analysis-of-tcp-ao-uaf-cve-2024-27394-f40508b84c42", "url": "https://t.me/CyberSecurityTechnologies/11175", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-17T09:30:26Z", "date_only": false, "value": "2024-10-17T09:30:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_learnpress_c_fields_sqli.rb", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "fdfb01d0-bb81-432f-a927-4f8c3f7af6e2", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_learnpress_c_fields_sqli.rb"}, {"timestamp": "2024-11-22T11:07:13Z", "date_only": false, "value": "2024-11-22T11:07:13.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/15e3ebf4-a9e6-42e7-b2bc-ffd3bee002d9", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "9a5d7deb-21b0-4b45-a01e-e59b02200d6b"}, {"timestamp": "2025-02-06T03:13:46Z", "date_only": false, "value": "2025-02-06T03:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "75061d6f-b9bd-48b0-8c51-11e8e544f693"}, {"timestamp": "2025-02-08T23:20:39Z", "date_only": false, "value": "2025-02-08T23:20:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3892", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "b30758ed-b3fc-4aee-8c0f-86fb33aefdcd", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-8522\n\ud83c\udfe2 Vendor: thimpress\n\ud83d\udda5\ufe0f Product: learnpress\n\ud83d\udd39 Description: The LearnPress \u2013 WordPress LMS Plugin plugin for WordPress is vulnerable to SQL Injection via the 'c_only_fields' parameter of the /wp-json/learnpress/v1/courses REST API endpoint in all versions up to, and including, 4.2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2024-09-12T00:00:00Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/vulnerability/learnpress/wordpress-learnpress-wordpress-lms-plugin-plugin-4-2-7-unauthenticated-sql-injection-via-c-only-fields-vulnerability", "url": "https://t.me/DarkWebInformer_CVEAlerts/3892", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-23T04:11:06Z", "date_only": false, "value": "2025-02-23T04:11:06.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "8c08e6f3-28a5-408b-8758-1c2b5e617a73"}, {"timestamp": "2025-04-11T00:00:00Z", "date_only": false, "value": "2025-04-11T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/52171", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "fd66ff56-7e25-420c-b503-201f35cafa6c", "url": "https://www.exploit-db.com/exploits/52171", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-12T21:02:24.571Z", "date_only": false, "value": "2025-04-12T21:02:24.571870Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmngl425df2e", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "3473b06b-660f-4708-937a-67289e664f5b", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmngl425df2e"}, {"timestamp": "2025-10-23T21:13:04Z", "date_only": false, "value": "2025-10-23T21:13:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "a2d19da2-d6e9-4877-a7e8-4f998456302b"}, {"timestamp": "2026-04-08T17:29:38.397Z", "date_only": false, "value": "2026-04-08T17:29:38.397Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-8522", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T17:29:38.397Z", "date_only": false, "value": "2026-04-08T17:29:38.397Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2024-8522", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-08T21:32:53Z", "date_only": false, "value": "2026-04-08T21:32:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3W3R-R6G6-W8X5", "record": "GHSA-3W3R-R6G6-W8X5", "field": "modified"}, {"timestamp": "2026-06-08T12:12:59Z", "date_only": false, "value": "2026-06-08T12:12:59+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2024-8522", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3109d1ed-1468-43be-8627-3441953ffa07", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-08T12:12:59Z", "date_only": false, "value": "2026-06-08T12:12:59+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-8522", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "3109d1ed-1468-43be-8627-3441953ffa07", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T08:22:47.270Z", "date_only": false, "value": "2026-06-17T08:22:47.270", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-8522", "record": "FKIE_CVE-2024-8522", "field": "lastModified"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-8522", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "f7604c31-f056-48ca-9024-dfa8ddd3a99b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:06:09.542Z", "date_only": false, "value": "2026-06-23T14:06:09.542563Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f7604c31-f056-48ca-9024-dfa8ddd3a99b", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "8709e0a5-2c4d-4ca6-96e0-649f5d002994", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f7604c31-f056-48ca-9024-dfa8ddd3a99b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T09:23:22.975Z", "date_only": false, "value": "2026-06-30T09:23:22.975168Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3109d1ed-1468-43be-8627-3441953ffa07", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "4555c6a1-fa9c-4700-876a-65371e18978d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3109d1ed-1468-43be-8627-3441953ffa07", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": false, "value": "2026-07-20T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2024-8522", "field": "timestamps.last_seen_at", "uuid": "3109d1ed-1468-43be-8627-3441953ffa07", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": true, "value": "2026-07-20", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2024-8522", "field": "evidence.0.details.observation_date", "uuid": "3109d1ed-1468-43be-8627-3441953ffa07", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": false, "value": "2026-07-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2024-8522", "field": "status.status_updated_at", "uuid": "3109d1ed-1468-43be-8627-3441953ffa07", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-22T01:00:01Z", "date_only": false, "value": "2026-07-22T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2024-8522", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3109d1ed-1468-43be-8627-3441953ffa07", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-10-28T19:45:43.972Z", "anchors": {"origin": {"timestamp": "2024-09-12T08:30:46.615Z", "date_only": false, "value": "2024-09-12T08:30:46.615Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-8522", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-09-12T08:30:46.615Z", "date_only": false, "value": "2024-09-12T08:30:46.615Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-8522", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2024-09-12T10:08:54Z", "date_only": false, "value": "2024-09-12T10:08:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/12853", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "cfb94ab4-92f9-4aaf-b3c0-9c09e34a9e5a", "content": "\u200aCVE-2024-8522 (CVSS 10): LearnPress SQLi Flaw Leaves 90K+ WordPress Sites at Risk\n\nhttps://securityonline.info/cve-2024-8522-cvss-10-learnpress-sqli-flaw-leaves-90k-wordpress-sites-at-risk/", "url": "https://t.me/HackingInsights/12853", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2024-09-12T08:30:46Z", "date_only": false, "value": "2024-09-12T08:30:46+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-8522", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "f7604c31-f056-48ca-9024-dfa8ddd3a99b", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": -0.615, "hours": -0.00017083333333333333, "days": -7.118055555555556e-06, "min_seconds": -0.615, "max_seconds": -0.615, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2024-09-12T08:30:46.615Z", "date_only": false, "value": "2024-09-12T08:30:46.615Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-8522", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-09-12T08:30:46Z", "date_only": false, "value": "2024-09-12T08:30:46+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-8522", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "f7604c31-f056-48ca-9024-dfa8ddd3a99b", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": -0.615, "hours": -0.00017083333333333333, "days": -7.118055555555556e-06, "min_seconds": -0.615, "max_seconds": -0.615, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2024-09-12T08:30:46.615Z", "date_only": false, "value": "2024-09-12T08:30:46.615Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-8522", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-09-12T08:30:46Z", "date_only": false, "value": "2024-09-12T08:30:46+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-8522", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "f7604c31-f056-48ca-9024-dfa8ddd3a99b", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 5887.385, "hours": 1.6353847222222222, "days": 0.06814103009259259, "min_seconds": 5887.385, "max_seconds": 5887.385, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-09-12T08:30:46.615Z", "date_only": false, "value": "2024-09-12T08:30:46.615Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-8522", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-09-12T10:08:54Z", "date_only": false, "value": "2024-09-12T10:08:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/12853", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "cfb94ab4-92f9-4aaf-b3c0-9c09e34a9e5a", "content": "\u200aCVE-2024-8522 (CVSS 10): LearnPress SQLi Flaw Leaves 90K+ WordPress Sites at Risk\n\nhttps://securityonline.info/cve-2024-8522-cvss-10-learnpress-sqli-flaw-leaves-90k-wordpress-sites-at-risk/", "url": "https://t.me/HackingInsights/12853", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 67086897.357286, "hours": 18635.24926591278, "days": 776.4687194130324, "min_seconds": 67086897.357286, "max_seconds": 67086897.357286, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-09-12T08:30:46.615Z", "date_only": false, "value": "2024-09-12T08:30:46.615Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-8522", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T19:45:43.972Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 67086897.972286, "hours": 18635.24943674611, "days": 776.468726531088, "min_seconds": 67086897.972286, "max_seconds": 67086897.972286, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-09-12T08:30:46Z", "date_only": false, "value": "2024-09-12T08:30:46+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-8522", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "f7604c31-f056-48ca-9024-dfa8ddd3a99b", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-10-28T19:45:43.972Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 67081009.972286, "hours": 18633.613881190555, "days": 776.4005783829398, "min_seconds": 67081009.972286, "max_seconds": 67081009.972286, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-09-12T10:08:54Z", "date_only": false, "value": "2024-09-12T10:08:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/12853", "record": "CVE-2024-8522", "field": "creation_timestamp", "uuid": "cfb94ab4-92f9-4aaf-b3c0-9c09e34a9e5a", "content": "\u200aCVE-2024-8522 (CVSS 10): LearnPress SQLi Flaw Leaves 90K+ WordPress Sites at Risk\n\nhttps://securityonline.info/cve-2024-8522-cvss-10-learnpress-sqli-flaw-leaves-90k-wordpress-sites-at-risk/", "url": "https://t.me/HackingInsights/12853", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-28T19:45:43.972Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}