{"metadata": {"vulnerability": "cve-2025-4601", "count": 23, "kinds": {"milestone": 4, "sighting": 10, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-05-12T17:44:22.374Z", "date_only": false, "value": "2025-05-12T17:44:22.374Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-4601", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-06-09T14:53:33Z", "date_only": false, "value": "2025-06-09T14:53:33.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2025-4601", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-06-10T03:41:38.102Z", "date_only": false, "value": "2025-06-10T03:41:38.102Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-4601", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-06-10T04:15:49Z", "date_only": false, "value": "2025-06-10T04:15:49Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7GQ9-QGM5-C8J7", "record": "GHSA-7GQ9-QGM5-C8J7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-06-10T04:15:49.113Z", "date_only": false, "value": "2025-06-10T04:15:49.113", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4601", "record": "FKIE_CVE-2025-4601", "field": "published"}, {"timestamp": "2025-06-10T04:29:31Z", "date_only": false, "value": "2025-06-10T04:29:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17822", "record": "CVE-2025-4601", "field": "creation_timestamp", "uuid": "b409bc77-4ba9-45a0-83de-8cb9ae1ce43c", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4601\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The \"RH - Real Estate WordPress Theme\" theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.4.0. This is due to the theme not properly restricting user roles that can be updated as part of the inspiry_update_profile() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to set their role to that of an administrator. The vulnerability was partially patched in version 4.4.0, and fully patched in version 4.4.1.\n\ud83d\udccf Published: 2025-06-10T03:41:38.102Z\n\ud83d\udccf Modified: 2025-06-10T03:41:38.102Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a816e5a8-2494-4bcf-869d-5214b21f7791?source=cve\n2. https://themeforest.net/item/real-homes-wordpress-real-estate-theme/5373914", "url": "https://t.me/DarkWebInformer_CVEAlerts/17822"}, {"timestamp": "2025-06-10T04:31:27Z", "date_only": false, "value": "2025-06-10T04:31:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SuCuNuYYG7YH6LF-PMvjYx2GIDz9A5wanFKy4pWUO100XY8", "record": "CVE-2025-4601", "field": "creation_timestamp", "uuid": "192e3f51-88fe-4b44-b15a-402855ad8730"}, {"timestamp": "2025-06-10T04:31:28Z", "date_only": false, "value": "2025-06-10T04:31:28.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/V_hoToMNJWitXda3AeStRLzASmqLUaxvEeMJmzsq6dWwPe4", "record": "CVE-2025-4601", "field": "creation_timestamp", "uuid": "50cce996-a070-4786-a276-d0c38be8c5c4"}, {"timestamp": "2025-06-10T05:29:01.424Z", "date_only": false, "value": "2025-06-10T05:29:01.424381Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lra5woqfwv2r", "record": "CVE-2025-4601", "field": "creation_timestamp", "uuid": "0ed795a9-44fb-40b8-a4a9-c706672f5a1f", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lra5woqfwv2r"}, {"timestamp": "2025-06-10T05:45:37.837Z", "date_only": false, "value": "2025-06-10T05:45:37.837487Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lra6uevy2a2a", "record": "CVE-2025-4601", "field": "creation_timestamp", "uuid": "f9d91eb2-477d-43de-a2eb-d871000c9c4a", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lra6uevy2a2a"}, {"timestamp": "2025-06-10T06:31:38Z", "date_only": false, "value": "2025-06-10T06:31:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7GQ9-QGM5-C8J7", "record": "GHSA-7GQ9-QGM5-C8J7", "field": "published"}, {"timestamp": "2025-06-10T06:31:38Z", "date_only": false, "value": "2025-06-10T06:31:38Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7GQ9-QGM5-C8J7", "record": "GHSA-7GQ9-QGM5-C8J7", "field": "modified"}, {"timestamp": "2025-06-10T14:09:38.618Z", "date_only": false, "value": "2025-06-10T14:09:38.618183Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-4601", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-06-10T14:09:38.618Z", "date_only": false, "value": "2025-06-10T14:09:38.618183Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4601", "record": "FKIE_CVE-2025-4601", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-06-10T14:10:12.864Z", "date_only": false, "value": "2025-06-10T14:10:12.864Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-4601", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-10T21:00:06Z", "date_only": false, "value": "2025-06-10T21:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/L9NvAnTGGF6o0vkyY3wXSpskvm72yWoKlMeoTLBXCFbPe3k", "record": "CVE-2025-4601", "field": "creation_timestamp", "uuid": "a750a2fb-8506-4147-b531-32d97461952c"}, {"timestamp": "2025-06-11T15:00:07Z", "date_only": false, "value": "2025-06-11T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3XjFdQnl9XelOVe1uN4E2a4frNC7kETFnR_z5QGqSWjIPjM", "record": "CVE-2025-4601", "field": "creation_timestamp", "uuid": "c222a79e-6082-4ad3-a0bc-bf37ad68b45e"}, {"timestamp": "2025-06-25T00:39:13Z", "date_only": false, "value": "2025-06-25T00:39:13.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/nVjbyWi1OTQqVrCfCpVg9HGjFoxjWvVL_Heny3L18ja2tx5m", "record": "CVE-2025-4601", "field": "creation_timestamp", "uuid": "545c9ed8-6d09-495d-bf0e-af285d9acbb2"}, {"timestamp": "2025-06-25T00:39:14Z", "date_only": false, "value": "2025-06-25T00:39:14.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-QOyMiowJoIyiMyTWDmr53uOV1Gxrf1KetOkwLf9_gvu4z0", "record": "CVE-2025-4601", "field": "creation_timestamp", "uuid": "13bf8fa0-5ca2-45cd-83b1-def0fa7c7b73"}, {"timestamp": "2025-06-25T17:32:32Z", "date_only": false, "value": "2025-06-25T17:32:32.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/EKi3juhW8KdvSrT-C52NnQYma9e80zcUs_26vGBIli1oz3UL", "record": "CVE-2025-4601", "field": "creation_timestamp", "uuid": "774a5c1b-1cbc-474a-87d7-07e5fc5a197f"}, {"timestamp": "2026-04-08T17:13:49.609Z", "date_only": false, "value": "2026-04-08T17:13:49.609Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-4601", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T17:13:49.609Z", "date_only": false, "value": "2026-04-08T17:13:49.609Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "cve-2025-4601", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T09:33:36.343Z", "date_only": false, "value": "2026-06-17T09:33:36.343", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4601", "record": "FKIE_CVE-2025-4601", "field": "lastModified"}]}