{"uuid": "429b8a5c-3bfb-47db-b4f1-20c12a9f8754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-9707", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1076", "content": "Massive Botnet Exploit Hits Hundreds of Thousands of Websites via Obsolete Plugins\n\nA sweeping campaign has targeted WordPress websites using the outdated plugins GutenKit and Hunk Companion, exploiting three critical vulnerabilities (CVE-2024-9234, CVE-2024-9707, CVE-2024-11972). Despite patches being available since late 2024, thousands of sites remain exposed.Security vendor Wordfence blocked 8.7 million attack attempts over a two-day window (Oct 8\u20139). In instances where attackers gained access, they installed additional weak plugins (e.g., wp-query-console) to achieve full site takeover.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:25.267199Z"}