Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 20:35:46 +0000 CVE-2024-11972 — Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation https://cve.radiocsirt.org/vuln/cve-2024-11972 <p><strong>Affected:</strong> Unknown Hunk Companion</p> <p>The Hunk Companion WordPress plugin before 1.9.0 does not correctly authorize some REST API endpoints, allowing unauthenticated requests to install and activate arbitrary Hunk Companion WordPress plugin before 1.9.0 from the WordPress.org repo, including vulnerable Hunk Companion WordPress plugin before 1.9.0 that have been closed.</p> <p><strong>Affected:</strong> Unknown Hunk Companion</p> <p>The Hunk Companion WordPress plugin before 1.9.0 does not correctly authorize some REST API endpoints, allowing unauthenticated requests to install and activate arbitrary Hunk Companion WordPress plugin before 1.9.0 from the WordPress.org repo, including vulnerable Hunk Companion WordPress plugin before 1.9.0 that have been closed.</p> https://cve.radiocsirt.org/vuln/cve-2024-11972