{"metadata": {"vulnerability": "CVE-2025-1307", "count": 25, "kinds": {"milestone": 4, "sighting": 12, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-02-14T19:07:01.515Z", "date_only": false, "value": "2025-02-14T19:07:01.515Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-1307", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2025-1307", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-03-04T04:26:09.463Z", "date_only": false, "value": "2025-03-04T04:26:09.463Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-1307", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-04T05:15:14Z", "date_only": false, "value": "2025-03-04T05:15:14Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q4HV-4JCG-PQG9", "record": "GHSA-Q4HV-4JCG-PQG9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-03-04T05:15:14.233Z", "date_only": false, "value": "2025-03-04T05:15:14.233", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1307", "record": "FKIE_CVE-2025-1307", "field": "published"}, {"timestamp": "2025-03-04T05:30:34Z", "date_only": false, "value": "2025-03-04T05:30:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6343", "record": "CVE-2025-1307", "field": "creation_timestamp", "uuid": "c1359698-7a87-42ea-a5ab-3bf9c321affc", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1307\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Newscrunch theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check in the newscrunch_install_and_activate_plugin() function in all versions up to, and including, 1.8.4.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.\n\ud83d\udccf Published: 2025-03-04T04:26:09.463Z\n\ud83d\udccf Modified: 2025-03-04T04:26:09.463Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b55567e9-24e6-4738-b7f7-b95b541e6067?source=cve\n2. https://themes.trac.wordpress.org/browser/newscrunch/1.8.3/functions.php#L486\n3. https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=261789%40newscrunch&new=261789%40newscrunch&sfp_email=&sfph_mail=", "url": "https://t.me/DarkWebInformer_CVEAlerts/6343"}, {"timestamp": "2025-03-04T06:01:30Z", "date_only": false, "value": "2025-03-04T06:01:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/macVH0v7i2nzlHDG3843dn9M-u-r9AI0mgz7c0Lv52YB4Bs", "record": "CVE-2025-1307", "field": "creation_timestamp", "uuid": "032ac2f7-8443-4273-8d30-d78c9bc604c4"}, {"timestamp": "2025-03-04T06:30:34Z", "date_only": false, "value": "2025-03-04T06:30:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q4HV-4JCG-PQG9", "record": "GHSA-Q4HV-4JCG-PQG9", "field": "published"}, {"timestamp": "2025-03-04T06:30:34Z", "date_only": false, "value": "2025-03-04T06:30:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q4HV-4JCG-PQG9", "record": "GHSA-Q4HV-4JCG-PQG9", "field": "modified"}, {"timestamp": "2025-03-04T07:04:08.918Z", "date_only": false, "value": "2025-03-04T07:04:08.918970Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljjvkjk4zp2h", "record": "CVE-2025-1307", "field": "creation_timestamp", "uuid": "f9bdf227-3f9f-4bce-ba60-e81797eb03c5", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljjvkjk4zp2h"}, {"timestamp": "2025-03-04T07:48:13.119Z", "date_only": false, "value": "2025-03-04T07:48:13.119939Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114103057938275565", "record": "CVE-2025-1307", "field": "creation_timestamp", "uuid": "d7d06f4a-0434-41bf-abb3-579a84b536c2", "url": "https://mastodon.social/users/CyberSignaler/statuses/114103057938275565"}, {"timestamp": "2025-03-04T08:18:32Z", "date_only": false, "value": "2025-03-04T08:18:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/19472", "record": "CVE-2025-1307", "field": "creation_timestamp", "uuid": "b08a6247-4888-44dd-872e-06fc0ece9788", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1307 - Newscrunch WordPress Unauthenticated Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1307 \nPublished : March 4, 2025, 5:15 a.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : The Newscrunch theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check in the newscrunch_install_and_activate_plugin() function in all versions up to, and including, 1.8.4.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/19472"}, {"timestamp": "2025-03-04T12:00:11.762Z", "date_only": false, "value": "2025-03-04T12:00:11.762874Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljkg3spm6t2q", "record": "CVE-2025-1307", "field": "creation_timestamp", "uuid": "016d04a6-8a1a-4e1a-b104-5605143517c0", "url": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljkg3spm6t2q"}, {"timestamp": "2025-03-04T15:28:58.852Z", "date_only": false, "value": "2025-03-04T15:28:58.852254Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-1307", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-04T15:28:58.852Z", "date_only": false, "value": "2025-03-04T15:28:58.852254Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1307", "record": "FKIE_CVE-2025-1307", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-04T22:00:06Z", "date_only": false, "value": "2025-03-04T22:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AUcfxApx61EFHOeSqEfIRLhfCLQTn8bpNAF6AdXUDg93-Ws", "record": "CVE-2025-1307", "field": "creation_timestamp", "uuid": "f1d9aa5f-aadc-4243-ab9b-dc72b9879387"}, {"timestamp": "2025-03-05T00:00:08.666Z", "date_only": false, "value": "2025-03-05T00:00:08.666753Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljlodab4eh2c", "record": "CVE-2025-1307", "field": "creation_timestamp", "uuid": "c7208ef8-8608-44b7-a9ab-5dcee05afdad", "url": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljlodab4eh2c"}, {"timestamp": "2025-03-06T04:00:08Z", "date_only": false, "value": "2025-03-06T04:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/sV1AUFkivO0e9rYI_xlVBhsFnqeagxDeiiX1CqtmuTVHp6k", "record": "CVE-2025-1307", "field": "creation_timestamp", "uuid": "e7e49b72-d6f6-4de3-be27-58a119fa0f6b"}, {"timestamp": "2025-03-11T16:09:02.539Z", "date_only": false, "value": "2025-03-11T16:09:02.539Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-1307", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-11T17:39:33Z", "date_only": false, "value": "2025-05-11T17:39:33.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/n00kCRnMj-tBQ4pZ1l9oQWnP5TRpU1UcBljcxKwlOyan_ruZ", "record": "CVE-2025-1307", "field": "creation_timestamp", "uuid": "4c603752-d563-4e0c-81e2-717e8f39cbf7"}, {"timestamp": "2025-08-18T13:31:24Z", "date_only": false, "value": "2025-08-18T13:31:24.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "record": "CVE-2025-1307", "field": "creation_timestamp", "uuid": "7aebaf83-d1d5-463c-92c4-94e2293aa72d"}, {"timestamp": "2025-08-19T02:47:48Z", "date_only": false, "value": "2025-08-19T02:47:48.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "record": "CVE-2025-1307", "field": "creation_timestamp", "uuid": "78ae86a4-dc13-49fa-9570-4d7cae1dcad2"}, {"timestamp": "2026-04-08T17:17:09.343Z", "date_only": false, "value": "2026-04-08T17:17:09.343Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-1307", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T17:17:09.343Z", "date_only": false, "value": "2026-04-08T17:17:09.343Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2025-1307", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:38:53.630Z", "date_only": false, "value": "2026-06-17T08:38:53.630", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1307", "record": "FKIE_CVE-2025-1307", "field": "lastModified"}]}