Themehunk Hunk_companion
2 CVEs affecting Themehunk Hunk_companion. Latest disclosed: 2024-12-31. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-11972 | Critical | 9.8 | 2024-12-31 | The Hunk Companion WordPress plugin before 1.9.0 does not correctly authorize some REST API endpoints, allowing unauthenticated requests to install and activat… |
CVE-2024-9707 | Critical | 9.8 | 2024-10-11 | The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the /wp-json/hc/v1/th… |