{"vulnerability": "CVE-2024-1860", "sightings": [{"uuid": "4a507a2c-f59e-4deb-9901-8c6b18a0e109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1860", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12892", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1860\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the antihacker_add_whitelist() function in all versions up to, and including, 4.51. This makes it possible for unauthenticated attackers to add their IP Address to the whitelist circumventing protection\n\ud83d\udccf Published: 2024-02-28T09:33:34.407Z\n\ud83d\udccf Modified: 2025-04-22T15:58:09.817Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3d365284-73ac-4730-a83d-9202677cf161?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&amp;sfph_mail=&amp;reponame=&amp;old=3040434%40antihacker&amp;new=3040434%40antihacker&amp;sfp_email=&amp;sfph_mail=", "creation_timestamp": "2025-04-22T16:03:38.000000Z"}, {"uuid": "4edf1248-6e28-418a-876f-c075c9829d1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1860", "type": "seen", "source": "https://t.me/ctinow/195341", "content": "https://ift.tt/8JPQFUx\nCVE-2024-1860", "creation_timestamp": "2024-02-28T11:31:32.000000Z"}, {"uuid": "9f833f0c-0e5c-4564-8d23-f8f20a007076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1860", "type": "seen", "source": "Telegram/LcwWE0U1muxSvfG50ezeJOUHgYnWkxL4WuRv2geKp9lcTkkh", "content": "", "creation_timestamp": "2025-02-14T10:04:00.000000Z"}, {"uuid": "8d146314-9bcf-4de0-aad7-be7c8da03295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1860", "type": "seen", "source": "https://t.me/ctinow/195345", "content": "https://ift.tt/8JPQFUx\nCVE-2024-1860", "creation_timestamp": "2024-02-28T11:31:36.000000Z"}]}