{"metadata": {"vulnerability": "CVE-2026-124833", "count": 12, "kinds": {"milestone": 3, "sighting": 3, "kev": 0, "other": 6}, "linked_omitted": 0}, "data": [{"timestamp": "2026-11-09T13:52:06.074Z", "date_only": false, "value": "2026-11-09T13:52:06.074Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-124833", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-13T06:00:09.349Z", "date_only": false, "value": "2026-11-13T06:00:09.349Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-124833", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-13T06:00:09.349Z", "date_only": false, "value": "2026-11-13T06:00:09.349Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2026-124833", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-13T06:15:27.477Z", "date_only": false, "value": "2026-11-13T06:15:27.477691Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117607663313241125", "record": "CVE-2026-124833", "field": "creation_timestamp", "uuid": "537252a2-c701-4fc0-947e-8582ebc39726", "content": "CVE-2026-124833 Ahime Image Printer <= 1.0.0 - Unauthenticated Arbitrary File Upload The Ahime Image Printer WordPress plugin through 1.0.0 does not validate the name, extension or type of uploaded files before writing them to disk, allowing unauthenticated attackers to upload arbitrary files, including PHP, and execute code on the server.\nhttps://www.cve.org/CVERecord?id=CVE-2026-124833https://wpscan.com/vulnerability/3b24b6d4-061c-4229-9ced-c2306eee44ea/#CVE_2026_124833#bot", "url": "https://infosec.exchange/users/cve/statuses/117607663313241125"}, {"timestamp": "2026-11-13T06:16:54Z", "date_only": false, "value": "2026-11-13T06:16:54Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CPHG-5225-V7HQ", "record": "GHSA-CPHG-5225-V7HQ", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-13T06:31:44Z", "date_only": false, "value": "2026-11-13T06:31:44Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CPHG-5225-V7HQ", "record": "GHSA-CPHG-5225-V7HQ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-13T18:43:53.388Z", "date_only": false, "value": "2026-11-13T18:43:53.388035Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-124833", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-11-13T18:47:19.866Z", "date_only": false, "value": "2026-11-13T18:47:19.866Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-124833", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-13T18:47:19.866Z", "date_only": false, "value": "2026-11-13T18:47:19.866Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-124833", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-13T19:50:10.410Z", "date_only": false, "value": "2026-11-13T19:50:10.410659Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3n27qxyaahw2u", "record": "CVE-2026-124833", "field": "creation_timestamp", "uuid": "df530087-9b70-4a52-bc25-e9954a709067", "content": "CVE-2026-124833 - ahime image printer\nThe Ahime Image Printer plugin for WordPress does not check uploaded files, so anyone on the internet can place any type of file on your server. This includes code files that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3n27qxyaahw2u"}, {"timestamp": "2026-11-13T21:31:54Z", "date_only": false, "value": "2026-11-13T21:31:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CPHG-5225-V7HQ", "record": "GHSA-CPHG-5225-V7HQ", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-14T12:00:33.008Z", "date_only": false, "value": "2026-11-14T12:00:33.008480Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3n2bh7cro2j2q", "record": "CVE-2026-124833", "field": "creation_timestamp", "uuid": "fec732e6-d159-438f-b72e-b400f6d6c4c6", "content": "CVE-2026-124833. CVSS 9.8. Ahime Image Printer lets anyone upload PHP. Your server executes it. Database. Config files. Gone. No patch yet. Disable the plugin now.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #FileUpload #CyberSecurity", "url": "https://bsky.app/profile/pulse-wp.com/post/3n2bh7cro2j2q"}], "metrics": {"as_of": "2026-11-14T22:16:54.845Z", "anchors": {"origin": {"timestamp": "2026-11-13T06:00:09.349Z", "date_only": false, "value": "2026-11-13T06:00:09.349Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-124833", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-13T06:00:09.349Z", "date_only": false, "value": "2026-11-13T06:00:09.349Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-124833", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 145005.496768, "hours": 40.27930465777778, "days": 1.6783043607407409, "min_seconds": 145005.496768, "max_seconds": 145005.496768, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-13T06:00:09.349Z", "date_only": false, "value": "2026-11-13T06:00:09.349Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-124833", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T22:16:54.845Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}