CVE-2024-11972
🗓️ 31 Dec 2024 06:00:01Reported by WPScanType 
cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 218 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 30 |
|---|---|---|---|---|
 | Exploit for CVE-2024-11972 | 15 Dec 202423:54 | – | githubexploit |
| Exploit for CVE-2024-11972 | 29 Jan 202521:17 | – | githubexploit |
| ninjakit | 8 Oct 202616:11 | – | githubexploit |
| Exploit for CVE-2024-11972 | 13 Jan 202515:44 | – | githubexploit |
 | New episode “In The Trend of VM” (#11): vulnerabilities that became trending in December and the final report on trending vulnerabilities for 2024 | 18 Feb 202517:28 | – | avleonov |
| About Authentication Bypass – Hunk Companion WordPress plugin (CVE-2024-11972) vulnerability | 11 Jan 202512:41 | – | avleonov |
 | Hunk Companion Plugin XSS | 19 Dec 202400:00 | – | bdu_fstec |
 | CVE-2024-11972 | 12 Dec 202408:18 | – | circl |
 | WordPress plugin Hunk Companion has security vulnerabilities | 31 Dec 202400:00 | – | cnnvd |
 | CVE-2024-11972 Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation | 31 Dec 202406:00 | – | cvelist |
10
Node
[
{
"vendor": "Unknown",
"product": "Hunk Companion",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "1.9.0"
}
],
"defaultStatus": "unaffected"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| params | request body | /wp-json/hc/v1/themehunk-import | Unauthenticated REST endpoint that allows installation/activation of plugins from WordPress.org via the themehunk-import endpoint. | |
| params.plugin | request body | /wp-json/hc/v1/themehunk-import | Unauthenticated REST endpoint that allows installation/activation of plugins from WordPress.org via the themehunk-import endpoint. | |
| params.allPlugins | request body | /wp-json/hc/v1/themehunk-import | Unauthenticated REST endpoint that allows installation/activation of plugins from WordPress.org via the themehunk-import endpoint. | |
| params.themeSlug | request body | /wp-json/hc/v1/themehunk-import | Unauthenticated REST endpoint that allows installation/activation of plugins from WordPress.org via the themehunk-import endpoint. | |
| params.proThemePlugin | request body | /wp-json/hc/v1/themehunk-import | Unauthenticated REST endpoint that allows installation/activation of plugins from WordPress.org via the themehunk-import endpoint. | |
| params.templateType | request body | /wp-json/hc/v1/themehunk-import | Unauthenticated REST endpoint that allows installation/activation of plugins from WordPress.org via the themehunk-import endpoint. | |
| params.tmplFreePro | request body | /wp-json/hc/v1/themehunk-import | Unauthenticated REST endpoint that allows installation/activation of plugins from WordPress.org via the themehunk-import endpoint. | |
| params.wpUrl | request body | /wp-json/hc/v1/themehunk-import | Unauthenticated REST endpoint that allows installation/activation of plugins from WordPress.org via the themehunk-import endpoint. |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 06:58Current
6.8Medium risk
Vulners AI Score6.8
CVSS 3.19.8
EPSS0.59055
SSVC