{"metadata": {"vulnerability": "CVE-2025-4389", "count": 26, "kinds": {"milestone": 4, "sighting": 13, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-05-06T19:26:11.492Z", "date_only": false, "value": "2025-05-06T19:26:11.492Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-4389", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-05-16T16:29:47Z", "date_only": false, "value": "2025-05-16T16:29:47.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2025-4389", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-05-17T05:30:33.140Z", "date_only": false, "value": "2025-05-17T05:30:33.140Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-4389", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-05-17T05:38:13.629Z", "date_only": false, "value": "2025-05-17T05:38:13.629357Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3lpdtb2d2hl2d", "record": "CVE-2025-4389", "field": "creation_timestamp", "uuid": "6d589d67-7f60-40f4-adde-178693467b1d", "url": "https://bsky.app/profile/potato.software/post/3lpdtb2d2hl2d"}, {"timestamp": "2025-05-17T06:15:18Z", "date_only": false, "value": "2025-05-17T06:15:18Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q86G-HCF4-HX9X", "record": "GHSA-Q86G-HCF4-HX9X", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-05-17T06:15:18.980Z", "date_only": false, "value": "2025-05-17T06:15:18.980", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4389", "record": "FKIE_CVE-2025-4389", "field": "published"}, {"timestamp": "2025-05-17T06:30:28Z", "date_only": false, "value": "2025-05-17T06:30:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q86G-HCF4-HX9X", "record": "GHSA-Q86G-HCF4-HX9X", "field": "published"}, {"timestamp": "2025-05-17T06:30:28Z", "date_only": false, "value": "2025-05-17T06:30:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q86G-HCF4-HX9X", "record": "GHSA-Q86G-HCF4-HX9X", "field": "modified"}, {"timestamp": "2025-05-17T06:43:07.082Z", "date_only": false, "value": "2025-05-17T06:43:07.082266Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpdwv2zzu72e", "record": "CVE-2025-4389", "field": "creation_timestamp", "uuid": "86ce166a-e8b6-4d43-8c40-139e268957ed", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpdwv2zzu72e"}, {"timestamp": "2025-05-17T17:01:23.941Z", "date_only": false, "value": "2025-05-17T17:01:23.941186Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpezamsaqym2", "record": "CVE-2025-4389", "field": "creation_timestamp", "uuid": "67614cc3-2293-4c21-89ea-d52be1899000", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpezamsaqym2"}, {"timestamp": "2025-05-19T07:53:20.391Z", "date_only": false, "value": "2025-05-19T07:53:20.391026Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lpj3m5khcju2", "record": "cve-2025-4389", "field": "creation_timestamp", "uuid": "a0bc0190-b778-487a-ba08-a2245dd02dc3", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lpj3m5khcju2"}, {"timestamp": "2025-05-19T07:55:23.154Z", "date_only": false, "value": "2025-05-19T07:55:23.154917Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpj3of3jpko2", "record": "cve-2025-4389", "field": "creation_timestamp", "uuid": "59880d9b-4d6f-40ea-b0fa-a7c1f152fa1c", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpj3of3jpko2"}, {"timestamp": "2025-05-19T12:57:19.990Z", "date_only": false, "value": "2025-05-19T12:57:19.990922Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpjmpzwniaz2", "record": "cve-2025-4389", "field": "creation_timestamp", "uuid": "e9a15049-31c2-4849-8141-c4267494285c", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpjmpzwniaz2"}, {"timestamp": "2025-05-19T16:58:52.991Z", "date_only": false, "value": "2025-05-19T16:58:52.991409Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-4389", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-19T16:58:52.991Z", "date_only": false, "value": "2025-05-19T16:58:52.991409Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4389", "record": "FKIE_CVE-2025-4389", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-19T16:58:58.435Z", "date_only": false, "value": "2025-05-19T16:58:58.435Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-4389", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-19T17:39:17Z", "date_only": false, "value": "2025-05-19T17:39:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16903", "record": "CVE-2025-4389", "field": "creation_timestamp", "uuid": "24a66def-187b-4d2b-94f4-afd9f70e9394", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4389\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the crawlomatic_generate_featured_image() function in all versions up to, and including, 2.6.8.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.\n\ud83d\udccf Published: 2025-05-17T05:30:33.140Z\n\ud83d\udccf Modified: 2025-05-19T16:58:58.435Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1283e839-8588-4a76-9c1e-61562526166d?source=cve\n2. https://codecanyon.net/item/crawlomatic-multisite-scraper-post-generator-plugin-for-wordpress/20476010", "url": "https://t.me/DarkWebInformer_CVEAlerts/16903"}, {"timestamp": "2025-05-19T18:55:13.253Z", "date_only": false, "value": "2025-05-19T18:55:13.253206Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpkamvrgpe52", "record": "cve-2025-4389", "field": "creation_timestamp", "uuid": "0262ff3d-2c1a-4400-a2cb-034b97a7a9a9", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpkamvrgpe52"}, {"timestamp": "2025-05-19T20:57:48.030Z", "date_only": false, "value": "2025-05-19T20:57:48.030836Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpkh5hb6ijb2", "record": "cve-2025-4389", "field": "creation_timestamp", "uuid": "cc97a97c-1a26-405f-9d18-8dfdb9ff6405", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpkh5hb6ijb2"}, {"timestamp": "2025-05-20T07:43:08.556Z", "date_only": false, "value": "2025-05-20T07:43:08.556468Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpllmkcc5yi2", "record": "cve-2025-4389", "field": "creation_timestamp", "uuid": "2c85cbe1-f71a-4e49-a19c-662886fc8260", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpllmkcc5yi2"}, {"timestamp": "2025-05-20T15:09:15.600Z", "date_only": false, "value": "2025-05-20T15:09:15.600907Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpmejazdfb42", "record": "cve-2025-4389", "field": "creation_timestamp", "uuid": "7367fbe8-b3f8-47af-9bf9-66ea8575d3f9", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpmejazdfb42"}, {"timestamp": "2025-05-21T06:42:06.674Z", "date_only": false, "value": "2025-05-21T06:42:06.674710Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpnynumlp5y2", "record": "cve-2025-4389", "field": "creation_timestamp", "uuid": "3aaa3a6c-dcdb-464e-887f-b8250fe1136c", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpnynumlp5y2"}, {"timestamp": "2025-05-21T07:20:08.880Z", "date_only": false, "value": "2025-05-21T07:20:08.880212Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpo2ss3l43x2", "record": "cve-2025-4389", "field": "creation_timestamp", "uuid": "8ee349c9-ccca-4cc0-a5f0-81ed2f7db3a5", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpo2ss3l43x2"}, {"timestamp": "2026-04-08T16:36:26.068Z", "date_only": false, "value": "2026-04-08T16:36:26.068Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-4389", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T16:36:26.068Z", "date_only": false, "value": "2026-04-08T16:36:26.068Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2025-4389", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T09:33:10.297Z", "date_only": false, "value": "2026-06-17T09:33:10.297", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4389", "record": "FKIE_CVE-2025-4389", "field": "lastModified"}]}