{"metadata": {"vulnerability": "cve-2025-4387", "count": 20, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 13}}, "data": [{"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2025-4387", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-05-06T00:00:00Z", "date_only": false, "value": "2025-05-06T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2025-4387", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2025-05-06T17:02:27.568Z", "date_only": false, "value": "2025-05-06T17:02:27.568Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-4387", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-06-09T15:30:01Z", "date_only": false, "value": "2025-06-09T15:30:01.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2025-4387", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2025-06-10T03:41:37.630Z", "date_only": false, "value": "2025-06-10T03:41:37.630Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-4387", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-06-10T04:15:34Z", "date_only": false, "value": "2025-06-10T04:15:34Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WQVC-54GV-GR3W", "record": "GHSA-WQVC-54GV-GR3W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-06-10T04:15:34.623Z", "date_only": false, "value": "2025-06-10T04:15:34.623", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4387", "record": "FKIE_CVE-2025-4387", "field": "published"}, {"timestamp": "2025-06-10T04:29:32Z", "date_only": false, "value": "2025-06-10T04:29:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17823", "record": "CVE-2025-4387", "field": "creation_timestamp", "uuid": "337e2b10-afd4-4158-81f8-adc4e78a4c3b", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4387\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Abandoned Cart Pro for WooCommerce plugin contains an authenticated arbitrary file upload vulnerability due to missing file type validation in the wcap_add_to_cart_popup_upload_files function in all versions up to, and including, 9.16.0. This makes it possible for an authenticated attacker, with subscriber-level access and above, to upload arbitrary files on the affected site's server which may allow for either remote or local code execution depending on the server configuration.\n\ud83d\udccf Published: 2025-06-10T03:41:37.630Z\n\ud83d\udccf Modified: 2025-06-10T03:41:37.630Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5d2f07bb-89b3-41d4-b606-9722deecf816?source=cve\n2. https://www.tychesoftwares.com/products/woocommerce-abandoned-cart-pro-plugin/\n3. https://www.tychesoftwares.com/docs/docs/abandoned-cart-pro-for-woocommerce-new/changelog-abandoned-cart-pro/#changelog-abandon-cart-pro-for-woocommerce-9-17-0-release-date-m", "url": "https://t.me/DarkWebInformer_CVEAlerts/17823"}, {"timestamp": "2025-06-10T04:31:28Z", "date_only": false, "value": "2025-06-10T04:31:28.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/V_hoToMNJWitXda3AeStRLzASmqLUaxvEeMJmzsq6dWwPe4", "record": "CVE-2025-4387", "field": "creation_timestamp", "uuid": "c61d4d5c-c792-4715-9ead-1436c7b1cf32"}, {"timestamp": "2025-06-10T05:24:01.246Z", "date_only": false, "value": "2025-06-10T05:24:01.246524Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lra5nqbkby2p", "record": "CVE-2025-4387", "field": "creation_timestamp", "uuid": "b2a87a95-93c8-4486-9044-e86a7d837141", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lra5nqbkby2p"}, {"timestamp": "2025-06-10T06:31:37Z", "date_only": false, "value": "2025-06-10T06:31:37Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WQVC-54GV-GR3W", "record": "GHSA-WQVC-54GV-GR3W", "field": "published"}, {"timestamp": "2025-06-10T06:31:37Z", "date_only": false, "value": "2025-06-10T06:31:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WQVC-54GV-GR3W", "record": "GHSA-WQVC-54GV-GR3W", "field": "modified"}, {"timestamp": "2025-06-10T14:09:53.067Z", "date_only": false, "value": "2025-06-10T14:09:53.067954Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-4387", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-06-10T14:09:53.067Z", "date_only": false, "value": "2025-06-10T14:09:53.067954Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4387", "record": "FKIE_CVE-2025-4387", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-06-10T14:10:01.687Z", "date_only": false, "value": "2025-06-10T14:10:01.687Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-4387", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": true, "value": "2025-06-17", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-12856", "record": "CNVD-2025-12856", "field": "submitTime"}, {"timestamp": "2025-06-18T00:00:00Z", "date_only": true, "value": "2025-06-18", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-12856", "record": "CNVD-2025-12856", "field": "openTime"}, {"timestamp": "2026-04-08T16:55:47.915Z", "date_only": false, "value": "2026-04-08T16:55:47.915Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-4387", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T16:55:47.915Z", "date_only": false, "value": "2026-04-08T16:55:47.915Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "cve-2025-4387", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T09:33:10.073Z", "date_only": false, "value": "2026-06-17T09:33:10.073", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4387", "record": "FKIE_CVE-2025-4387", "field": "lastModified"}]}