Russian Vulnerability Scanner Database

Back to List

CVE-2024-11972

Scores

EPSS

0.913high91.3%
0%20%40%60%80%100%

Percentile: 91.3%

CVSS

9.8critical3.x
0246810

CVSS Score: 9.8/10

All CVSS Scores

CVSS 3.x
9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The Hunk Companion WordPress plugin before 1.9.0 does not correctly authorize some REST API endpoints, allowing unauthenticated requests to install and activate arbitrary Hunk Companion WordPress plugin before 1.9.0 from the WordPress.org repo, including vulnerable Hunk Companion WordPress plugin before 1.9.0 that have been closed.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

anchore_overridesnvd

Related Vulnerabilities

BDU:2024-11316

Exploits

Exploit ID: 52259

Source: exploitdb

URL: https://www.exploit-db.com/exploits/52259

Exploit ID: CVE-2024-11972

Source: github-poc

URL: https://github.com/Nxploited/CVE-2024-11972-PoC

Vulnerable Software (2)

Type: Configuration

Operating System:

Trait: 
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:themehunk:hunk_companion:*:*:*:*:*:wordpress:*:*",          "versionEndExcluding": "1.9.0"        }      ], ...

Source: anchore_overrides

Type: Configuration

Vendor: *

Product: hunk_companion

Operating System: * * *

Trait: 
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:themehunk:hunk_companion:*:*:*:*:*:wordpress:*:*",      "versionEndExcluding": "1.9.0",      "vulnerable": true    }  ],  "operator": "OR"}

Source: nvd

End of list