#hunkcompanion — Public Fediverse posts

Mass Attack Targets WordPress via GutenKit and Hunk Companion Plugins https://hackread.com/wordpress-mass-attack-gutenkit-hunk-companion-plugins/ #Cybersecurity #HunkCompanion #Vulnerability #Wordfence #Wordpress #Security #GutenKit

So schwer ist es doch gar nicht: Haltet eure Software aktuell. Ja, auch WordPress und installierte Plugins.
Gerade, so bereichtet Wordfence, liefe eine Angriffswelle gegen bereits im Oktober bzw. Dezember 2024 gepatchte Plugins: GutenKit 2.1.0 oder früher und Hunk Companion 1.8.5 oder früher.

https://www.wordfence.com/blog/2025/10/mass-exploit-campaign-targeting-arbitrary-plugin-installation-vulnerabilities/

#infosec #wordpress #plugins #gutenkit #hunkcompanion #BeDiS

WordPress site owners—critical vulnerabilities in popular plugins are letting hackers take control of sites. Is yours updated and safe? Read more about what you need to do now.

https://thedefendopsdiaries.com/mass-exploitation-of-wordpress-plugins-gutenkit-and-hunk-companion-puts-thousands-of-sites-at-risk/

#wordpresssecurity
#pluginvulnerabilities
#cyberattacks
#gutenkit
#hunkcompanion

Security researchers discover campaign exploiting a vulnerability in the #HunkCompanion #WordPress plugin

The vulnerability is tracked as CVE-2024-11972, and when exploited, allows an attacker to install arbitrary plugins. This can be used by an attacker to install other vulnerable plugins that can lead to further compromise.

Administrators are advised to patch ASAP

#cybersecurity

https://www.bleepingcomputer.com/news/security/hunk-companion-wordpress-plugin-exploited-to-install-vulnerable-plugins/