WordPress Panic: Plugins Gone Wild with Backdoors and Exploits!
Hunk Companion and WP Query Console plugins are like uninvited guests at a cybersecurity party—gatecrashing websites with vulnerabilities. The Hunk Companion bug CVE‑2024‑9707 lets attackers activate plugins, while WP Query Console’s flaw CVE-2024-50498 allows code execution. Update your plugins, or risk having your website become a hacker’s new home!
Hot Take:
In the world of WordPress, plugins are like chocolate: irresistible but sometimes hazardous to your health. It seems Hunk Companion and WP Query Console have turned into Willy Wonka’s ticking time bombs, giving hackers their golden tickets to sneak into our beloved websites. If your site is powered by these plugins, it’s high time you swapped out that chocolate for a carrot stick—security patch, that is!
Key Points:
- Hunk Companion and WP Query Console WordPress plugins are being exploited for backdoor access.
- The vulnerability in Hunk Companion is tracked as CVE-2024-9707 with a CVSS score of 9.8.
- WP Query Console has a code injection flaw tracked as CVE-2024-50498, also with a CVSS score of 9.8.
- Despite patches, many installations remain unpatched, leaving websites vulnerable.
- Security firms report mass exploitation, with tens of thousands of attack attempts in a single day.