CVE-2024-11972
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Dec 31, 2024
Summary
CVE-2024-11972: The Hunk Companion WordPress plugin before version 1.9.0 contains a vulnerability that allows unauthenticated users to install and activate arbitrary plugins, including the vulnerable Hunk Companion plugin itself, through its REST API endpoints. This issue can lead to potential security risks and unintended functionality. WordPress users are advised to update their Hunk Companion plugin to version 1.9.0 or later to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Hunk Companion Plugin
Affected Vendors
- WordPress