https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 30 Jul 2026 03:29:26 +0000 https://vulnerability.circl.lu/sighting/1a9a6a02-91da-4b61-9242-ef47fa526e33/export {"uuid": "1a9a6a02-91da-4b61-9242-ef47fa526e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://t.me/ZerodayAlert/410", "content": "\u0427\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\n\n\ud83d\udcbb \u0412 Windows \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 ksthunk.sys \u0438 CLFS.sys. \u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\ud83c\udf10 \u041f\u043b\u0430\u0433\u0438\u043d Hunk Companion \u0434\u043b\u044f WordPress \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-11972 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 9.8, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435 6800 \u0441\u0430\u0439\u0442\u043e\u0432. \u0411\u0440\u0435\u0448\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u26a0\ufe0f \u0412\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Apache Struts \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-53677 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.5, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0431\u043e\u043b\u0435\u0435 40 000 \u0440\u0430\u0437. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Windows #WordPress #Apache\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:43.024608Z"} {"uuid": "1a9a6a02-91da-4b61-9242-ef47fa526e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://t.me/ZerodayAlert/410", "content": "\u0427\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\n\n\ud83d\udcbb \u0412 Windows \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 ksthunk.sys \u0438 CLFS.sys. \u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\ud83c\udf10 \u041f\u043b\u0430\u0433\u0438\u043d Hunk Companion \u0434\u043b\u044f WordPress \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-11972 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 9.8, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435 6800 \u0441\u0430\u0439\u0442\u043e\u0432. \u0411\u0440\u0435\u0448\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u26a0\ufe0f \u0412\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Apache Struts \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-53677 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.5, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0431\u043e\u043b\u0435\u0435 40 000 \u0440\u0430\u0437. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Windows #WordPress #Apache\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:43.024608Z"} https://vulnerability.circl.lu/sighting/1a9a6a02-91da-4b61-9242-ef47fa526e33/export Sun, 26 Jul 2026 00:00:43 +0000 https://vulnerability.circl.lu/sighting/b6a85a2d-5296-4305-a2a7-c7c104a340ee/export {"uuid": "b6a85a2d-5296-4305-a2a7-c7c104a340ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://t.me/ZerodayAlert/410", "content": "\u0427\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\n\n\ud83d\udcbb \u0412 Windows \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 ksthunk.sys \u0438 CLFS.sys. \u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\ud83c\udf10 \u041f\u043b\u0430\u0433\u0438\u043d Hunk Companion \u0434\u043b\u044f WordPress \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-11972 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 9.8, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435 6800 \u0441\u0430\u0439\u0442\u043e\u0432. \u0411\u0440\u0435\u0448\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u26a0\ufe0f \u0412\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Apache Struts \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-53677 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.5, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0431\u043e\u043b\u0435\u0435 40 000 \u0440\u0430\u0437. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Windows #WordPress #Apache\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:18.716745Z"} {"uuid": "b6a85a2d-5296-4305-a2a7-c7c104a340ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://t.me/ZerodayAlert/410", "content": "\u0427\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\n\n\ud83d\udcbb \u0412 Windows \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 ksthunk.sys \u0438 CLFS.sys. \u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\ud83c\udf10 \u041f\u043b\u0430\u0433\u0438\u043d Hunk Companion \u0434\u043b\u044f WordPress \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-11972 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 9.8, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435 6800 \u0441\u0430\u0439\u0442\u043e\u0432. \u0411\u0440\u0435\u0448\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u26a0\ufe0f \u0412\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Apache Struts \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-53677 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.5, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0431\u043e\u043b\u0435\u0435 40 000 \u0440\u0430\u0437. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Windows #WordPress #Apache\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:18.716745Z"} https://vulnerability.circl.lu/sighting/b6a85a2d-5296-4305-a2a7-c7c104a340ee/export Sat, 25 Jul 2026 15:00:18 +0000 https://vulnerability.circl.lu/sighting/872b9688-24aa-4444-87cf-af55ef278729/export {"uuid": "872b9688-24aa-4444-87cf-af55ef278729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1076", "content": "Massive Botnet Exploit Hits Hundreds of Thousands of Websites via Obsolete Plugins\n\nA sweeping campaign has targeted WordPress websites using the outdated plugins GutenKit and Hunk Companion, exploiting three critical vulnerabilities (CVE-2024-9234, CVE-2024-9707, CVE-2024-11972). Despite patches being available since late 2024, thousands of sites remain exposed.Security vendor Wordfence blocked 8.7 million attack attempts over a two-day window (Oct 8\u20139). In instances where attackers gained access, they installed additional weak plugins (e.g., wp-query-console) to achieve full site takeover.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:25.230886Z"} {"uuid": "872b9688-24aa-4444-87cf-af55ef278729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1076", "content": "Massive Botnet Exploit Hits Hundreds of Thousands of Websites via Obsolete Plugins\n\nA sweeping campaign has targeted WordPress websites using the outdated plugins GutenKit and Hunk Companion, exploiting three critical vulnerabilities (CVE-2024-9234, CVE-2024-9707, CVE-2024-11972). Despite patches being available since late 2024, thousands of sites remain exposed.Security vendor Wordfence blocked 8.7 million attack attempts over a two-day window (Oct 8\u20139). In instances where attackers gained access, they installed additional weak plugins (e.g., wp-query-console) to achieve full site takeover.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:25.230886Z"} https://vulnerability.circl.lu/sighting/872b9688-24aa-4444-87cf-af55ef278729/export Thu, 23 Jul 2026 00:00:25 +0000 https://vulnerability.circl.lu/sighting/c06c3bc9-aa2f-44e4-9c69-f35cabc65776/export {"uuid": "c06c3bc9-aa2f-44e4-9c69-f35cabc65776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://t.me/pphm_HackerNews/1076", "content": "Massive Botnet Exploit Hits Hundreds of Thousands of Websites via Obsolete Plugins\n\nA sweeping campaign has targeted WordPress websites using the outdated plugins GutenKit and Hunk Companion, exploiting three critical vulnerabilities (CVE-2024-9234, CVE-2024-9707, CVE-2024-11972). Despite patches being available since late 2024, thousands of sites remain exposed.Security vendor Wordfence blocked 8.7 million attack attempts over a two-day window (Oct 8\u20139). In instances where attackers gained access, they installed additional weak plugins (e.g., wp-query-console) to achieve full site takeover.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:04.874527Z"} {"uuid": "c06c3bc9-aa2f-44e4-9c69-f35cabc65776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://t.me/pphm_HackerNews/1076", "content": "Massive Botnet Exploit Hits Hundreds of Thousands of Websites via Obsolete Plugins\n\nA sweeping campaign has targeted WordPress websites using the outdated plugins GutenKit and Hunk Companion, exploiting three critical vulnerabilities (CVE-2024-9234, CVE-2024-9707, CVE-2024-11972). Despite patches being available since late 2024, thousands of sites remain exposed.Security vendor Wordfence blocked 8.7 million attack attempts over a two-day window (Oct 8\u20139). In instances where attackers gained access, they installed additional weak plugins (e.g., wp-query-console) to achieve full site takeover.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:04.874527Z"} https://vulnerability.circl.lu/sighting/c06c3bc9-aa2f-44e4-9c69-f35cabc65776/export Wed, 22 Jul 2026 05:00:04 +0000 https://vulnerability.circl.lu/sighting/7b3ee1e2-0fdc-48c4-bac5-09f5e4a3cea4/export {"uuid": "7b3ee1e2-0fdc-48c4-bac5-09f5e4a3cea4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/928323ee-2e2f-4328-ade3-1e3bafc2a1db", "content": "", "creation_timestamp": "2026-06-19T12:45:50.210987Z"} {"uuid": "7b3ee1e2-0fdc-48c4-bac5-09f5e4a3cea4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/928323ee-2e2f-4328-ade3-1e3bafc2a1db", "content": "", "creation_timestamp": "2026-06-19T12:45:50.210987Z"} https://vulnerability.circl.lu/sighting/7b3ee1e2-0fdc-48c4-bac5-09f5e4a3cea4/export Fri, 19 Jun 2026 12:45:50 +0000 https://vulnerability.circl.lu/sighting/5714f488-eb38-4283-8502-b5355ef66698/export {"uuid": "5714f488-eb38-4283-8502-b5355ef66698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11976", "type": "seen", "source": "https://gist.github.com/Darkcrai86/937853a754acb94821530e1119327db3", "content": "", "creation_timestamp": "2026-01-23T08:46:15.000000Z"} {"uuid": "5714f488-eb38-4283-8502-b5355ef66698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11976", "type": "seen", "source": "https://gist.github.com/Darkcrai86/937853a754acb94821530e1119327db3", "content": "", "creation_timestamp": "2026-01-23T08:46:15.000000Z"} https://vulnerability.circl.lu/sighting/5714f488-eb38-4283-8502-b5355ef66698/export Fri, 23 Jan 2026 08:46:15 +0000 https://vulnerability.circl.lu/sighting/be372c3d-be45-4e0d-ae39-96a443647a42/export {"uuid": "be372c3d-be45-4e0d-ae39-96a443647a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11976", "type": "seen", "source": "https://gist.github.com/Darkcrai86/f70c78d37356986e9bbe7eac93b9d71e", "content": "", "creation_timestamp": "2026-01-23T07:43:54.000000Z"} {"uuid": "be372c3d-be45-4e0d-ae39-96a443647a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11976", "type": "seen", "source": "https://gist.github.com/Darkcrai86/f70c78d37356986e9bbe7eac93b9d71e", "content": "", "creation_timestamp": "2026-01-23T07:43:54.000000Z"} https://vulnerability.circl.lu/sighting/be372c3d-be45-4e0d-ae39-96a443647a42/export Fri, 23 Jan 2026 07:43:54 +0000 https://vulnerability.circl.lu/sighting/a8ab1702-3e19-4088-b279-a5e1102373c9/export {"uuid": "a8ab1702-3e19-4088-b279-a5e1102373c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-91df1732-73af074958dee773", "content": "", "creation_timestamp": "2025-10-29T07:57:31.889384Z"} {"uuid": "a8ab1702-3e19-4088-b279-a5e1102373c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-91df1732-73af074958dee773", "content": "", "creation_timestamp": "2025-10-29T07:57:31.889384Z"} https://vulnerability.circl.lu/sighting/a8ab1702-3e19-4088-b279-a5e1102373c9/export Wed, 29 Oct 2025 07:57:31 +0000 https://vulnerability.circl.lu/sighting/3b468ad9-1029-4e66-a2bf-8107b1d0fd49/export {"uuid": "3b468ad9-1029-4e66-a2bf-8107b1d0fd49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3m4aq7tb2mr2j", "content": "", "creation_timestamp": "2025-10-28T10:33:24.987715Z"} {"uuid": "3b468ad9-1029-4e66-a2bf-8107b1d0fd49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3m4aq7tb2mr2j", "content": "", "creation_timestamp": "2025-10-28T10:33:24.987715Z"} https://vulnerability.circl.lu/sighting/3b468ad9-1029-4e66-a2bf-8107b1d0fd49/export Tue, 28 Oct 2025 10:33:24 +0000 https://vulnerability.circl.lu/sighting/75dcdc6b-a2d0-4a2a-bf19-454f2935d908/export {"uuid": "75dcdc6b-a2d0-4a2a-bf19-454f2935d908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://gist.github.com/Darkcrai86/95fecaab4bd13df2c4a53b0485496346", "content": "", "creation_timestamp": "2025-10-27T09:33:51.000000Z"} {"uuid": "75dcdc6b-a2d0-4a2a-bf19-454f2935d908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://gist.github.com/Darkcrai86/95fecaab4bd13df2c4a53b0485496346", "content": "", "creation_timestamp": "2025-10-27T09:33:51.000000Z"} https://vulnerability.circl.lu/sighting/75dcdc6b-a2d0-4a2a-bf19-454f2935d908/export Mon, 27 Oct 2025 09:33:51 +0000