{"vulnerability": "CVE-2025-2929", "sightings": [{"uuid": "ca76419b-31bc-4c56-bc49-ed70d6324b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29294", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll56zvvuiq2x", "content": "", "creation_timestamp": "2025-03-24T16:39:36.297191Z"}, {"uuid": "c59ab0b1-b214-4148-b1cd-701cf8d4c073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2929", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lplkbgrhj42o", "content": "", "creation_timestamp": "2025-05-20T07:18:40.937186Z"}, {"uuid": "8f47273c-bad7-48a4-9f68-73f0af82d146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2929", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16953", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2929\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin\n\ud83d\udccf Published: 2025-05-20T06:00:06.223Z\n\ud83d\udccf Modified: 2025-05-20T06:00:06.223Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/e9299d8f-900b-4487-b135-b82946825e61/", "creation_timestamp": "2025-05-20T06:39:43.000000Z"}, {"uuid": "c20223cb-82bb-40f1-ac01-8e03fc092d80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29294", "type": "seen", "source": "https://t.me/cvedetector/20974", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-29294 - H3C Router Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-29294 \nPublished : March 24, 2025, 4:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : An issue in H3C R3000 V100R009 and NX600 V100R0011 and NX15000 V100R005 and NX30 V100R0011 and NX54 V100R011 and BX54 V100R004 and BX54-E V100R0010 and NX18 Plus V100R006 allows a remote attacker to execute arbitrary code via the set_ipv6_static function and the clear_ipv6_info function \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-24T18:24:24.000000Z"}, {"uuid": "fb041a20-0404-4caf-8c6d-0c571d30cda7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29296", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbwhogkt22l", "content": "CVE-2025-29296\nMultiple vulnerabilities in H3C routers allow a remote attacker to execute arbitrary commands as the root user, potentially gaining complete control of the device. This could lead to unauthorized access, data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-04T21:12:05.310577Z"}]}