{"vulnerability": "CVE-2025-23949", "sightings": [{"uuid": "636c69e1-e07f-4785-8484-c9b6886d684b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23949", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113872795409374014", "content": "", "creation_timestamp": "2025-01-22T15:49:26.359167Z"}, {"uuid": "bbeb12d2-0a30-479b-8a34-9ffc5797d012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23949", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgdpspr56v2g", "content": "", "creation_timestamp": "2025-01-22T15:49:48.805438Z"}, {"uuid": "936dcb99-b619-45d7-b32e-a707b605dc0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23949", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgdpsqbypp25", "content": "", "creation_timestamp": "2025-01-22T15:49:51.466342Z"}, {"uuid": "a3c57bae-c1b7-41bb-85f8-ff0043af92cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23949", "type": "seen", "source": "https://t.me/cvedetector/16097", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23949 - Mihajlovic Nenad Improved Sale Badges PHP Remote File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-23949 \nPublished : Jan. 22, 2025, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mihajlovic Nenad Improved Sale Badges \u2013 Free Version allows PHP Local File Inclusion. This issue affects Improved Sale Badges \u2013 Free Version: from n/a through 1.0.1. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T17:13:33.000000Z"}, {"uuid": "1bb849e6-a57d-4ac8-be51-286456cc4ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23949", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdoao5m742f", "content": "", "creation_timestamp": "2025-01-22T15:21:47.563955Z"}, {"uuid": "a689e699-359d-4353-bd58-25b146a6c88a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23949", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2564", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23949\n\ud83d\udd39 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mihajlovic Nenad Improved Sale Badges \u2013 Free Version allows PHP Local File Inclusion. This issue affects Improved Sale Badges \u2013 Free Version: from n/a through 1.0.1.\n\ud83d\udccf Published: 2025-01-22T14:29:24.700Z\n\ud83d\udccf Modified: 2025-01-22T15:24:32.432Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/improved-sale-badges-free-version/vulnerability/wordpress-improved-sale-badges-free-version-plugin-1-0-1-local-file-inclusion-vulnerability?_s_id=cve", "creation_timestamp": "2025-01-22T16:01:51.000000Z"}]}