CVE-2024-11972

About Authentication Bypass - #HunkCompanion #WordPress plugin (CVE-2024-11972) vulnerability allowing unauthenticated attackers to install and activate plugins from the WordPressOrg repository. #WPScan ➡️ https://t.co/harUMA16nb https://t.co/syb37wn5J6

CVE-2024-11972 (CVSS:9.8, CRITICAL) is Awaiting Analysis. The Hunk Companion WordPress plugin before 1.9.0 does not correctly authorize some REST API endpoints, allowing unauthen..https://t.co/O5PfZ0zp7C #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

CVE-2024-11972 Unauthenticated Plugin Installation Vulnerability in Hunk... https://t.co/8PLyY01NWF Don't wait vulnerability scanning results: https://t.co/oh1APvMMnd

CVE-2024-11972 The Hunk Companion WordPress plugin before 1.9.0 does not correctly authorize some REST API endpoints, allowing unauthenticated requests to install and activate arbit… https://t.co/VcbuHyleUH

WordPress の Hunk Companion プラグインの脆弱性 CVE-2024-11972 が FIX：ただちにパッチを！ https://t.co/EYUN4O910S Hunk Companion の脆弱性を悪用する脅威アクターたちは、それにより、既知の脆弱性を抱えている、他のプラグインをダウンロード／実行し、WeorPress サイトを侵害していきます。… https://t.co/Ok9TKfh3mx

WordPress Hunk Companion Plugin Flaw Exploited to Silently Install Vulnerable Plugins The flaw, tracked as CVE-2024-11972 (CVSS score: 9.8), affects all versions of the plugin prior to 1.9.0. The plugin has over 10,000 active installations. Read More: https://t.co/bEZZ0fkGOO http

Critical Vulnerability in Hunk Companion Plugin: Unauthorized Plugin Installation #OSINT #CVE-2024-11972 #CVE-2024-50498 #T1190 #ExploitPublicFacingApplication #T1210 #ExploitationOfRemoteServices #T1505003 #WebShell #T1588005 #Exploits https://t.co/poymjeGxsj

🚨 WordPress'te KRİTİK Güvenlik Açığı! 🔐 Araştırmacılara göre, popüler Hunk Companion eklentisinde CVE-2024-11972 adlı güvenlik açığı aktif saldırılara neden oluyor. ⚠️ 9.8/10 Şiddet Skoru taşıyan açık, saldırganların kimliksiz bir şekilde kötü amaçlı kod çalıştırmasına izin…

Attention aux attaques : Vulnérabilité critique dans le plugin Hunk Companion pour WordPress exploité pour installer secrètement des plugins vulnérables. CVE-2024-11972 avec un score CVSS de 9.8. Pour les Analystes de Sécurité #WordPress #Cybersecurite 👉 https://t.co/MVzItCSYfH

🗞️ Hunk Companion Plugin Flaw Exploited for Silent Plugin Installation Hackers are actively exploiting a critical vulnerability in the WordPress Hunk Companion plugin (CVE-2024-11972) to install vulnerable plugins, opening the door for Remote Code Execution (RCE) on over 10,000

🚨 Using WordPress? You might be at risk. A critical flaw in the Hunk Companion plugin (CVE-2024-11972) affects 10,000+ sites. Attackers can install vulnerable plugins and launch attacks like #RCE, #SQLInjection and #XSS. Update to v1.9.0 now! 🔗Read more: https://t.co/CkMrtkqbKn

🚨 CVE Alert: WordPress Hunk Companion Plugin Remote Code Execution (RCE) Vulnerability Exploited In The Wild🚨 Vulnerability Details: CVE-2024-11972 (CVSS v3 9.8/10) WordPress Hunk Companion Plugin Remote Code Execution (RCE) Vulnerability Impact A Successful exploit may allow

🚨 CVE Alert: WordPress Hunk Companion Plugin Remote Code Execution (RCE) Vulnerability Exploited In The Wild🚨 Vulnerability Details: CVE-2024-11972 (CVSS v3 9.8/10) WordPress Hunk Companion Plugin Remote Code Execution (RCE) Vulnerability Impact A Successful exploit may allow

🚨 CVE Alert: WordPress Hunk Companion Remote Code Execution (RCE) Vulnerability Exploited In The Wild🚨 Vulnerability Details: CVE-2024-11972 (CVSS v3 9.8/10) WordPress Hunk Companion Remote Code Execution (RCE) Vulnerability Impact A Successful exploit may allow attackers to…

Active Exploitation Observed for CVE-2024-11972 (CVSS 9.8): WordPress Plugin Flaw Exposes 10,000+ Sites to Backdoor Attacks https://t.co/tTvrMpsOvh

WordPress Hunk Companion Plugin Flaw Exploited to Silently Install Vulnerable Plugins. The flaw, tracked as CVE-2024-11972 (CVSS score: 9.8), affects all versions of the plugin prior to 1.9.0. The plugin has over 10,000 active installations. https://t.co/1OLiucgGXL https://t.co/M

Critical WordPress plugin vulnerability under active exploit threatens thousands: CVE-2024-11972 https://t.co/YPvp3Qk8Hm

Hunk Companion WordPress plugin exploited to install vulnerable plugins: https://t.co/8MtZpN47nT Hackers are exploiting a critical vulnerability (CVE-2024-11972) in the Hunk Companion WordPress plugin, allowing the installation of outdated plugins with known flaws. This can lead

🔴 Vulnerabilities & Patches: 1. WordPress Hunk Companion Plugin Flaw Exploited to Silently Install Vulnerable Plugins: Attackers are exploiting the Hunk Companion vulnerability (CVE-2024-11972) to install flawed plugins, enabling RCE attacks on over 10,000 WordPress sites.

🚨 WordPress Security Alert: Hunk Companion Plugin Exploited! A critical flaw (CVE-2024-11972) in the Hunk Companion plugin is being actively exploited, allowing attackers to install & activate malicious plugins for RCE, SQLi, & XSS attacks.

🚨 WordPress Alert: The Hunk Companion plugin vulnerability (CVE-2024-11972) opens doors to unauthorized access and potential site compromise. Protect your site—update and secure now! 🔒 #CyberSecurity #WordPressVulnerability 🔗 Read more: https://t.co/4JNWd14pRd

🚨 Attention WordPress Developers! 🚨 A critical vulnerability in the Hunk Companion plugin (CVE-2024-11972) is being exploited to install vulnerable plugins, risking RCE and other attacks on over 10,000 sites! Update to version 1.9.0 ASAP! Read more here: https://t.co/3YNIDqYFHc

🚨 Critical Flaw Alert in Hunk Companion Plugin for #WordPress! 🚨 https://t.co/1DAg4Zq0wk A vulnerability (CVE-2024-11972) allows attackers to install & activate other vulnerable plugins without authentication, leading to potential RCE, SQL Injection, and more. Over 10,000 s

Critical flaw in Hunk Companion plugin (CVE-2024-11972, CVSS: 9.8) allows attackers to install vulnerable plugins, potentially leading to Remote Code Execution (RCE), SQL Injection, and administrative backdoors. Over 10,000 WordPress sites are at risk. https://t.co/OkVpYiAmjh

Critical flaw in Hunk Companion plugin (CVE-2024-11972, CVSS: 9.8) allows attackers to install vulnerable plugins, potentially leading to Remote Code Execution (RCE), SQL Injection, and administrative backdoors.

Critical flaw in Hunk Companion plugin (CVE-2024-11972, CVSS: 9.8) exposes 10,000+ #WordPress sites to RCE, SQL Injection, and backdoors. Secure your site now: https://t.co/vYC3XHtVJx #CyberSecurityAwareness