{"metadata": {"vulnerability": "CVE-2025-5947", "count": 45, "kinds": {"milestone": 4, "sighting": 29, "kev": 0, "other": 12}}, "data": [{"timestamp": "2025-06-09T18:12:28.543Z", "date_only": false, "value": "2025-06-09T18:12:28.543Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-5947", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-07-31T14:59:11Z", "date_only": false, "value": "2025-07-31T14:59:11.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2025-5947", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-08-01T03:24:46.283Z", "date_only": false, "value": "2025-08-01T03:24:46.283Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-5947", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-08-01T04:16:21Z", "date_only": false, "value": "2025-08-01T04:16:21Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-X2XX-4QHP-2VQX", "record": "GHSA-X2XX-4QHP-2VQX", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-08-01T04:16:21.693Z", "date_only": false, "value": "2025-08-01T04:16:21.693", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-5947", "record": "FKIE_CVE-2025-5947", "field": "published"}, {"timestamp": "2025-08-01T04:31:28.619Z", "date_only": false, "value": "2025-08-01T04:31:28.619758Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lvcsxn247l2t", "record": "cve-2025-5947", "field": "creation_timestamp", "uuid": "58188b12-9780-402a-9bc8-d42befebda88", "url": "https://bsky.app/profile/offseq.bsky.social/post/3lvcsxn247l2t"}, {"timestamp": "2025-08-01T06:31:36Z", "date_only": false, "value": "2025-08-01T06:31:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-X2XX-4QHP-2VQX", "record": "GHSA-X2XX-4QHP-2VQX", "field": "published"}, {"timestamp": "2025-08-10T00:00:00Z", "date_only": true, "value": "2025-08-10", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-18283", "record": "CNVD-2025-18283", "field": "submitTime"}, {"timestamp": "2025-08-12T00:00:00Z", "date_only": true, "value": "2025-08-12", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-18283", "record": "CNVD-2025-18283", "field": "openTime"}, {"timestamp": "2025-10-07T16:44:43Z", "date_only": false, "value": "2025-10-07T16:44:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Darkcrai86/b6a8eee2ed2df4a5d2becbda7f7b6538", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "6895e782-4fae-4581-aec1-9981cbe42f83", "url": "https://gist.github.com/Darkcrai86/b6a8eee2ed2df4a5d2becbda7f7b6538"}, {"timestamp": "2025-10-08T04:16:06.899Z", "date_only": false, "value": "2025-10-08T04:16:06.899313Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m2nrsr3brq2k", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "070c9692-97bf-42ae-9707-2a80320d181e", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m2nrsr3brq2k"}, {"timestamp": "2025-10-09T04:57:00Z", "date_only": false, "value": "2025-10-09T04:57:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/10/critical-exploit-lets-hackers-bypass.html", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "aef5dbde-eabc-41bb-bc18-49679c11dfbc", "url": "https://thehackernews.com/2025/10/critical-exploit-lets-hackers-bypass.html"}, {"timestamp": "2025-10-09T06:23:50.399Z", "date_only": false, "value": "2025-10-09T06:23:50.399622Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m2qjg3zgq42b", "record": "cve-2025-5947", "field": "creation_timestamp", "uuid": "f5db7494-7f57-4b9d-ab2a-e81d619f4b34", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m2qjg3zgq42b"}, {"timestamp": "2025-10-09T07:00:26Z", "date_only": false, "value": "2025-10-09T07:00:26.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/7685", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "a7e6d22a-6a30-4387-93de-0a37f287f1b1", "content": "\ud83d\udea8 Hackers are hijacking WordPress sites right now.\n\nA critical flaw (CVE-2025-5947) in the Service Finder theme lets anyone log in as an admin \u2014 no password needed.\n\n13,800+ exploit attempts. Still rising.\nMost sites haven\u2019t patched.\n\nDetails here \u2192 https://thehackernews.com/2025/10/critical-exploit-lets-hackers-bypass.html", "url": "https://t.me/thehackernews/7685"}, {"timestamp": "2025-10-09T08:52:49Z", "date_only": false, "value": "2025-10-09T08:52:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/0B4EjxjE7tPN7jtjJgATjTJwjOaitGaKccVdXiM3x39p7w", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "48baa2eb-5fb2-49ce-87f3-cf537d2999fc"}, {"timestamp": "2025-10-09T09:11:58.888Z", "date_only": false, "value": "2025-10-09T09:11:58.888472Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technadu.com/post/3m2qssiyqkk2z", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "41156770-8f8a-41f4-a9e1-f8df71895b41", "url": "https://bsky.app/profile/technadu.com/post/3m2qssiyqkk2z"}, {"timestamp": "2025-10-09T09:12:05.578Z", "date_only": false, "value": "2025-10-09T09:12:05.578063Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/tomcat/statuses/115343433743833378", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "ed6c7757-f8ef-4a50-8cd0-6325bdd0a4a1", "url": "https://infosec.exchange/users/tomcat/statuses/115343433743833378"}, {"timestamp": "2025-10-09T10:33:51.252Z", "date_only": false, "value": "2025-10-09T10:33:51.252553Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m2qxf5jd2i2j", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "8318be29-da2f-4f86-ba2a-1aa874b731fb", "url": "https://bsky.app/profile/offseq.bsky.social/post/3m2qxf5jd2i2j"}, {"timestamp": "2025-10-09T13:38:45.397Z", "date_only": false, "value": "2025-10-09T13:38:45.397045Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-c371801f-a6c4922e972db990", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "4924dfb5-aaa9-46cf-9ec3-055604bd2557", "url": "https://poliverso.org/objects/0477a01e-c371801f-a6c4922e972db990"}, {"timestamp": "2025-10-09T14:12:36.794Z", "date_only": false, "value": "2025-10-09T14:12:36.794689Z", "kind": "sighting", "label": "Exploited", "source": "https://www.wordfence.com/blog/2025/10/attackers-actively-exploiting-critical-vulnerability-in-service-finder-bookings-plugin/", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "c26bdbd4-268b-49d5-95f6-8d4135918e45", "url": "https://www.wordfence.com/blog/2025/10/attackers-actively-exploiting-critical-vulnerability-in-service-finder-bookings-plugin/"}, {"timestamp": "2025-10-09T15:24:45.770Z", "date_only": false, "value": "2025-10-09T15:24:45.770745Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getnews-me.bsky.social/post/3m2rhndbdae2e", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "5ac0ff65-e789-4d18-a41d-48f348e56291", "url": "https://bsky.app/profile/getnews-me.bsky.social/post/3m2rhndbdae2e"}, {"timestamp": "2025-10-09T15:25:52.198Z", "date_only": false, "value": "2025-10-09T15:25:52.198780Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m2rhpd4ife2a", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "a5b92c27-5f0d-463a-863d-a57f918b59d4", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m2rhpd4ife2a"}, {"timestamp": "2025-10-09T16:34:51.867Z", "date_only": false, "value": "2025-10-09T16:34:51.867983Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-5947", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-10-09T16:34:51.867Z", "date_only": false, "value": "2025-10-09T16:34:51.867983Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-5947", "record": "FKIE_CVE-2025-5947", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-10-09T16:34:58.533Z", "date_only": false, "value": "2025-10-09T16:34:58.533Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-5947", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-10T02:59:12Z", "date_only": false, "value": "2025-10-10T02:59:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://sploitus.com/exploit?id=053506EB-2AB5-5707-A83E-8A10FF57D472&utm_source=rss&utm_medium=rss", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "f3da6498-3e2c-4695-a2c1-ec4d0b9b6b65", "url": "https://sploitus.com/exploit?id=053506EB-2AB5-5707-A83E-8A10FF57D472&utm_source=rss&utm_medium=rss"}, {"timestamp": "2025-10-10T07:00:12Z", "date_only": false, "value": "2025-10-10T07:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hevZHamlpsxHwDO1OBgX-78zzxKZaDxvE3E9XgTCwGG_ytc", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "a5465eb6-c56f-48b9-a1fc-9c5219e01e3b"}, {"timestamp": "2025-10-10T09:00:05Z", "date_only": false, "value": "2025-10-10T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/rgVWXG_JF3lBzF944Q1uZEdqOiMVLUPqZjS8co3vkMC7j4o", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "4d552fc2-e1f1-4ac8-9d5a-4ae16a9ad1ae"}, {"timestamp": "2025-10-10T22:12:01.706Z", "date_only": false, "value": "2025-10-10T22:12:01.706703Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/115352162870974189", "record": "cve-2025-5947", "field": "creation_timestamp", "uuid": "32581df1-1933-456f-bec0-7c23aaf248ca", "url": "https://infosec.exchange/users/patrickcmiller/statuses/115352162870974189"}, {"timestamp": "2025-10-12T00:05:26.917Z", "date_only": false, "value": "2025-10-12T00:05:26.917276Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/115358271009421029", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "666805fb-1edb-441d-8917-db5a3c2f43be", "url": "https://mstdn.ca/users/rfwaveio/statuses/115358271009421029"}, {"timestamp": "2025-10-12T21:02:40.621Z", "date_only": false, "value": "2025-10-12T21:02:40.621495Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2zlw3oclk2w", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "4e7511ad-3633-4dd6-9da3-7a585142832b", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2zlw3oclk2w"}, {"timestamp": "2025-10-14T15:08:46.759Z", "date_only": false, "value": "2025-10-14T15:08:46.759686Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lucioborges.bsky.social/post/3m35z3ejaxe2k", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "73f6ece2-4902-43d5-8c68-e3dda7bfdfb4", "url": "https://bsky.app/profile/lucioborges.bsky.social/post/3m35z3ejaxe2k"}, {"timestamp": "2025-10-15T10:34:42Z", "date_only": false, "value": "2025-10-15T10:34:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://sploitus.com/exploit?id=C5FD1F5D-7496-570E-80CC-26D0469165A4", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "63b35b32-e787-4d6b-a689-f04edbd60237", "url": "https://sploitus.com/exploit?id=C5FD1F5D-7496-570E-80CC-26D0469165A4"}, {"timestamp": "2025-10-15T15:00:15Z", "date_only": false, "value": "2025-10-15T15:00:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Mr9Z8MVJjeKA66f8ZojpmG-RVMx18rEtE_CmYFEASFNvA5g", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "b6e85d67-8a67-45db-af37-49c5861dfde5"}, {"timestamp": "2025-10-23T13:24:36.769Z", "date_only": false, "value": "2025-10-23T13:24:36.769Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2025-5947", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-23T15:30:24Z", "date_only": false, "value": "2025-10-23T15:30:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-X2XX-4QHP-2VQX", "record": "GHSA-X2XX-4QHP-2VQX", "field": "modified"}, {"timestamp": "2026-03-31T21:03:00.850Z", "date_only": false, "value": "2026-03-31T21:03:00.850465Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mif37gxxl52a", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "ab9e445e-3bbb-4c17-8e9e-7a5894a9e288", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mif37gxxl52a"}, {"timestamp": "2026-04-08T17:19:58.726Z", "date_only": false, "value": "2026-04-08T17:19:58.726Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-5947", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T17:19:58.726Z", "date_only": false, "value": "2026-04-08T17:19:58.726Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2025-5947", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-30T07:02:55Z", "date_only": false, "value": "2026-05-30T07:02:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/86501", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "02d2cae2-04b5-4bc4-88f3-35c6ac536a9b", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-5947\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xxconi\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-30 07:02:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2025-5947 WordPress Service Finder Bookings \u2264 6.0 Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/86501"}, {"timestamp": "2026-05-30T11:00:11Z", "date_only": false, "value": "2026-05-30T11:00:11.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/yYHRBxvUjQ02015bx83J8tkOO2fwWdsxD6Ne1eYIS9oW1lo", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "df08720d-5d84-4dea-8bcc-858c89f78ea3"}, {"timestamp": "2026-06-17T09:49:05.090Z", "date_only": false, "value": "2026-06-17T09:49:05.090", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-5947", "record": "FKIE_CVE-2025-5947", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:50.887Z", "date_only": false, "value": "2026-06-19T12:45:50.887079Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ffc21c60-f38c-4928-b501-b5d5e9b94dce", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "871e99ca-04bc-4b98-a015-09aeefd35823", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ffc21c60-f38c-4928-b501-b5d5e9b94dce"}, {"timestamp": "2026-09-24T23:00:15Z", "date_only": false, "value": "2026-09-24T23:00:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/aZCb1ZT5ToCPLdAN_wjtdC2c-OdVdjT8C_FU5E1EmQZAX-4", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "27e30a8f-abea-47b9-afad-0f9d6a932fec"}, {"timestamp": "2026-09-24T23:00:15Z", "date_only": false, "value": "2026-09-24T23:00:15.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/aZCb1ZT5ToCPLdAN_wjtdC2c-OdVdjT8C_FU5E1EmQZAX-4", "record": "CVE-2025-5947", "field": "creation_timestamp", "uuid": "7ef41837-a3e7-4255-ab2c-bfca88155022"}]}