{"vulnerability": "CVE-2024-11972", "sightings": [{"uuid": "c31f684f-e405-47a4-8b1b-e35560d1f4fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://thehackernews.com/2024/12/wordpress-hunk-companion-plugin-flaw.html", "content": "", "creation_timestamp": "2024-12-12T08:18:00.000000Z"}, {"uuid": "218b9b3a-0400-4181-aa2a-5e7893839aec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/113652359388170754", "content": "", "creation_timestamp": "2024-12-14T17:29:43.037232Z"}, {"uuid": "13e628ca-b2f4-4f12-8995-f716f22e0686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://social.circl.lu/users/vulnerability_lookup/statuses/113655498042293128", "content": "", "creation_timestamp": "2024-12-15T06:47:51.610721Z"}, {"uuid": "78d93019-4cc0-4fd7-a898-c38c4664feb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113745941952359157", "content": "", "creation_timestamp": "2024-12-31T06:08:55.693586Z"}, {"uuid": "33d31dcb-d05f-470a-8a4c-6361cb11a4ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ln6ztjogvx2t", "content": "", "creation_timestamp": "2025-04-19T21:02:17.791926Z"}, {"uuid": "3b468ad9-1029-4e66-a2bf-8107b1d0fd49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3m4aq7tb2mr2j", "content": "", "creation_timestamp": "2025-10-28T10:33:24.987715Z"}, {"uuid": "ac0f33a4-6eb4-4165-b155-98bddd8bb0d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "e92402ac-b04a-4e73-ad0b-3c8344ca18bd", "vulnerability": "CVE-2024-11972", "type": "exploited", "source": "https://www.wordfence.com/blog/2025/10/mass-exploit-campaign-targeting-arbitrary-plugin-installation-vulnerabilities/", "content": "", "creation_timestamp": "2025-10-24T07:29:32.722937Z"}, {"uuid": "75dcdc6b-a2d0-4a2a-bf19-454f2935d908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://gist.github.com/Darkcrai86/95fecaab4bd13df2c4a53b0485496346", "content": "", "creation_timestamp": "2025-10-27T09:33:51.000000Z"}, {"uuid": "a8ab1702-3e19-4088-b279-a5e1102373c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-91df1732-73af074958dee773", "content": "", "creation_timestamp": "2025-10-29T07:57:31.889384Z"}, {"uuid": "167e81d5-b420-45d4-8099-4168b2eb8648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-11972.yaml", "content": "", "creation_timestamp": "2025-08-29T15:47:56.000000Z"}, {"uuid": "e8f3709a-2d0f-4373-a5d1-dbde43648d42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxuzbcklf62b", "content": "", "creation_timestamp": "2025-09-02T21:02:34.277786Z"}, {"uuid": "bf963e03-1faa-47bc-952f-0fb67cada232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://vulnerability.circl.lu/comment/5e1cc667-8f06-4cde-b167-203c95a1038c", "content": "", "creation_timestamp": "2024-12-15T06:47:50.105587Z"}, {"uuid": "cc49b1f6-cc3a-4493-93c2-900c1adc7fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9439", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aExploit for CVE-2024-11972, Hunk Companion < 1.9.0 Unauthorized Plugin Installation\nURL\uff1ahttps://github.com/JunTakemura/exploit-CVE-2024-11972\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-15T23:57:11.000000Z"}, {"uuid": "47d4c206-6360-4537-8b47-e981d40654fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/10527", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2024-11972 in Hunk Companion <1.9.0 allows unauthenticated attackers to exploit insecure REST API endpoints and install vulnerable plugins, risking RCE, SQLi, XSS, and backdoors.\nURL\uff1ahttps://github.com/RonF98/CVE-2024-11972-POC\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-01-16T10:16:29.000000Z"}, {"uuid": "c671dcfd-a291-4101-be18-66445491bc6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "exploited", "source": "https://t.me/CyberBulletin/1742", "content": "\u26a1\ufe0fActive Exploitation Observed for CVE-2024-11972 (CVSS 9.8): WordPress Plugin Flaw Exposes 10,000+ Sites to Backdoor Attacks.\n\n#CyberBulletin", "creation_timestamp": "2024-12-13T12:45:24.000000Z"}, {"uuid": "16013336-1dbd-4a42-9f13-37cd0ec8ffd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://t.me/cvedetector/13971", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-11972 - WordPress Hunk Companion Unauthorized Plugin Installation and Activation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-11972 \nPublished : Dec. 31, 2024, 6:15 a.m. | 35\u00a0minutes ago \nDescription : The Hunk Companion WordPress plugin before 1.9.0 does not correctly authorize some REST API endpoints, allowing unauthenticated requests to install and activate arbitrary Hunk Companion WordPress plugin before 1.9.0 from the WordPress.org repo, including vulnerable Hunk Companion WordPress plugin before 1.9.0 that have been closed. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T07:51:01.000000Z"}, {"uuid": "d7722777-0b28-4209-b1c7-88c172159f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/754", "content": "https://github.com/JunTakemura/exploit-CVE-2024-11972\n\nExploit for CVE-2024-11972, Hunk Companion < 1.9.0 Unauthenticated Plugin Installation\n#github #exploit", "creation_timestamp": "2024-12-18T10:36:45.000000Z"}, {"uuid": "55104245-5f22-4c2e-b8d2-dd935b6b5362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "published-proof-of-concept", "source": "https://t.me/six5zeroexploit/99", "content": "Hunk Companion Plugin (CVE-2024-11972) < 1.9.0 - Unauthenticated Plugin Installation Exploit\n\n\u26a1\ufe0f Join Channel :- @team_threefox \ud83e\udd8a\n\n\ud83e\udd8a Dm for Buy :- @ThreeFoxBot", "creation_timestamp": "2024-12-19T16:29:14.000000Z"}, {"uuid": "36db9583-e735-404d-94ca-9a52a7553ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "published-proof-of-concept", "source": "Telegram/RBa58q_idYjvO_jZM7OsJuDtBOJrKzALplfH6PDIRDzGtw", "content": "", "creation_timestamp": "2024-12-12T14:52:32.000000Z"}, {"uuid": "111a3e3e-2667-4d21-b260-2112c24df9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "published-proof-of-concept", "source": "Telegram/XIN-Y3hp1jfTcvV6CwOqxxQXZ4MmKS7rtpP9E0VrlY837nw", "content": "", "creation_timestamp": "2025-01-30T04:00:12.000000Z"}, {"uuid": "dce2fe0c-2c11-41c4-a00a-f66d0cbe6a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "published-proof-of-concept", "source": "https://t.me/bads_community/1619", "content": "Hunk Companion Plugin (CVE-2024-11972) < 1.9.0 - Unauthenticated Plugin Installation Exploit\n\n\u26a1\ufe0f Join Channel :- @team_threefox \ud83e\udd8a\n\n\ud83e\udd8a Dm for Buy :- @ThreeFoxBot", "creation_timestamp": "2024-12-19T16:29:14.000000Z"}, {"uuid": "9fa857c6-4f51-48f9-95bb-b0f17f1177f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "published-proof-of-concept", "source": "Telegram/w325E41di4scLZAZeav1H5x7KtwWQEG9CnYV1IaJHJrRvx4", "content": "", "creation_timestamp": "2025-01-30T04:00:07.000000Z"}, {"uuid": "16f568d5-9263-44cd-bbb3-2a28058035b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "published-proof-of-concept", "source": "https://t.me/bads_community/88882", "content": "Hunk Companion Plugin (CVE-2024-11972) < 1.9.0 - Unauthenticated Plugin Installation Exploit\n\n\u26a1\ufe0f Join Channel :- @team_threefox \ud83e\udd8a\n\n\ud83e\udd8a Dm for Buy :- @ThreeFoxBot", "creation_timestamp": "2024-12-19T16:29:14.000000Z"}, {"uuid": "2c6b85a5-771c-4319-93e2-c8dcc4338311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "published-proof-of-concept", "source": "https://t.me/bads_group/88881", "content": "Hunk Companion Plugin (CVE-2024-11972) < 1.9.0 - Unauthenticated Plugin Installation Exploit\n\n\u26a1\ufe0f Join Channel :- @team_threefox \ud83e\udd8a\n\n\ud83e\udd8a Dm for Buy :- @ThreeFoxBot", "creation_timestamp": "2024-12-19T16:29:11.000000Z"}, {"uuid": "025ae5d3-59de-4a78-99e8-6d057f152671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "published-proof-of-concept", "source": "https://t.me/mad_hackers_community/452", "content": "Hunk Companion Plugin (CVE-2024-11972) < 1.9.0 - Unauthenticated Plugin Installation Exploit\n\n\u26a1\ufe0f Join Channel :- @team_threefox \ud83e\udd8a\n\n\ud83e\udd8a Dm for Buy :- @ThreeFoxBot", "creation_timestamp": "2024-12-19T16:29:14.000000Z"}, {"uuid": "436324f2-e6ad-4a7c-8bcc-1a3f300269d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "exploited", "source": "https://t.me/thehackernews/6031", "content": "Critical flaw in Hunk Companion plugin (CVE-2024-11972, CVSS: 9.8) allows attackers to install vulnerable plugins, potentially leading to Remote Code Execution (RCE), SQL Injection, and administrative backdoors.\n\nOver 10,000 WordPress sites are at risk. Learn steps to secure your site now: https://thehackernews.com/2024/12/wordpress-hunk-companion-plugin-flaw.html", "creation_timestamp": "2024-12-12T10:21:49.000000Z"}, {"uuid": "9cd6db63-2726-4a33-abff-610ae26859b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "exploited", "source": "https://t.me/CyberBulletin/26773", "content": "\u26a1\ufe0fActive Exploitation Observed for CVE-2024-11972 (CVSS 9.8): WordPress Plugin Flaw Exposes 10,000+ Sites to Backdoor Attacks.\n\n#CyberBulletin", "creation_timestamp": "2024-12-13T12:45:24.000000Z"}, {"uuid": "54f20eff-1f24-48ea-8f04-ab207c9c945f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "published-proof-of-concept", "source": "https://t.me/haj3imad/120", "content": "https://github.com/JunTakemura/exploit-CVE-2024-11972\n\nExploit for CVE-2024-11972, Hunk Companion < 1.9.0 Unauthenticated Plugin Installation\n#github #exploit", "creation_timestamp": "2024-12-16T15:22:06.000000Z"}, {"uuid": "7b3ee1e2-0fdc-48c4-bac5-09f5e4a3cea4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/928323ee-2e2f-4328-ade3-1e3bafc2a1db", "content": "", "creation_timestamp": "2026-06-19T12:45:50.210987Z"}, {"uuid": "286f31e3-b0fe-4d17-b9bb-f6bab33dbac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://t.me/ZerodayAlert/410", "content": "\u0427\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\n\n\ud83d\udcbb \u0412 Windows \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 ksthunk.sys \u0438 CLFS.sys. \u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\ud83c\udf10 \u041f\u043b\u0430\u0433\u0438\u043d Hunk Companion \u0434\u043b\u044f WordPress \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-11972 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 9.8, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435 6800 \u0441\u0430\u0439\u0442\u043e\u0432. \u0411\u0440\u0435\u0448\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u26a0\ufe0f \u0412\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Apache Struts \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-53677 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.5, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0431\u043e\u043b\u0435\u0435 40 000 \u0440\u0430\u0437. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Windows #WordPress #Apache\n\n@ZerodayAlert", "creation_timestamp": "2026-08-06T05:00:05.672564Z"}, {"uuid": "172f07ca-12c4-489a-898f-6b9ebe36566f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://t.me/ZerodayAlert/410", "content": "\u0427\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\n\n\ud83d\udcbb \u0412 Windows \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 ksthunk.sys \u0438 CLFS.sys. \u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\ud83c\udf10 \u041f\u043b\u0430\u0433\u0438\u043d Hunk Companion \u0434\u043b\u044f WordPress \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-11972 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 9.8, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435 6800 \u0441\u0430\u0439\u0442\u043e\u0432. \u0411\u0440\u0435\u0448\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u26a0\ufe0f \u0412\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Apache Struts \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-53677 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.5, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0431\u043e\u043b\u0435\u0435 40 000 \u0440\u0430\u0437. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Windows #WordPress #Apache\n\n@ZerodayAlert", "creation_timestamp": "2026-08-07T00:30:18.254480Z"}, {"uuid": "c06c3bc9-aa2f-44e4-9c69-f35cabc65776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://t.me/pphm_HackerNews/1076", "content": "Massive Botnet Exploit Hits Hundreds of Thousands of Websites via Obsolete Plugins\n\nA sweeping campaign has targeted WordPress websites using the outdated plugins GutenKit and Hunk Companion, exploiting three critical vulnerabilities (CVE-2024-9234, CVE-2024-9707, CVE-2024-11972). Despite patches being available since late 2024, thousands of sites remain exposed.Security vendor Wordfence blocked 8.7 million attack attempts over a two-day window (Oct 8\u20139). In instances where attackers gained access, they installed additional weak plugins (e.g., wp-query-console) to achieve full site takeover.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:04.874527Z"}, {"uuid": "872b9688-24aa-4444-87cf-af55ef278729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1076", "content": "Massive Botnet Exploit Hits Hundreds of Thousands of Websites via Obsolete Plugins\n\nA sweeping campaign has targeted WordPress websites using the outdated plugins GutenKit and Hunk Companion, exploiting three critical vulnerabilities (CVE-2024-9234, CVE-2024-9707, CVE-2024-11972). Despite patches being available since late 2024, thousands of sites remain exposed.Security vendor Wordfence blocked 8.7 million attack attempts over a two-day window (Oct 8\u20139). In instances where attackers gained access, they installed additional weak plugins (e.g., wp-query-console) to achieve full site takeover.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:25.230886Z"}, {"uuid": "b6a85a2d-5296-4305-a2a7-c7c104a340ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://t.me/ZerodayAlert/410", "content": "\u0427\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\n\n\ud83d\udcbb \u0412 Windows \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 ksthunk.sys \u0438 CLFS.sys. \u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\ud83c\udf10 \u041f\u043b\u0430\u0433\u0438\u043d Hunk Companion \u0434\u043b\u044f WordPress \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-11972 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 9.8, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435 6800 \u0441\u0430\u0439\u0442\u043e\u0432. \u0411\u0440\u0435\u0448\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u26a0\ufe0f \u0412\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Apache Struts \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-53677 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.5, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0431\u043e\u043b\u0435\u0435 40 000 \u0440\u0430\u0437. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Windows #WordPress #Apache\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:18.716745Z"}, {"uuid": "1a9a6a02-91da-4b61-9242-ef47fa526e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://t.me/ZerodayAlert/410", "content": "\u0427\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\n\n\ud83d\udcbb \u0412 Windows \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 ksthunk.sys \u0438 CLFS.sys. \u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\ud83c\udf10 \u041f\u043b\u0430\u0433\u0438\u043d Hunk Companion \u0434\u043b\u044f WordPress \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-11972 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 9.8, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435 6800 \u0441\u0430\u0439\u0442\u043e\u0432. \u0411\u0440\u0435\u0448\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u26a0\ufe0f \u0412\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Apache Struts \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-53677 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.5, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0431\u043e\u043b\u0435\u0435 40 000 \u0440\u0430\u0437. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Windows #WordPress #Apache\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:43.024608Z"}]}