Tag: CVE-2024-11972
-
WordPress Arbitrary Installation Vulnerabilities Exploited in Mass Campaign
Critical vulnerabilities in GutenKit and Hunk Companion plugins enable unauthenticated attackers to install malicious plugins and achieve remote code execution ⚠️ URGENT CYBERSECURITY ALERT ⚠️ October 27, 2025 – Global Mass exploitation campaign targeting WordPress plugins GutenKit and Hunk Companion Over 8.7 million exploit attempts blocked by Wordfence Firewall Critical vulnerabilities allow unauthenticated plugin installation…