Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-11972-PoC — Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation | Kitploit
Tools/GitHubGitHub/nxploited/cve-2024-11972-poc
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration Testing
GitHubnxploited/cve-2024-11972-poc

CVE-2024-11972-PoC

Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation

View Repository
1 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-11972-PoC

Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation

Description

The Hunk Companion WordPress plugin before 1.9.0 does not correctly authorize some REST API endpoints, allowing unauthenticated requests to install and activate arbitrary Hunk Companion WordPress plugin before 1.9.0 from the WordPress.org repo, including vulnerable Hunk Companion WordPress plugin before 1.9.0 that have been closed.

Usage:

root@kitploit:~
usage: CVE-2024-11972.py [-h] -u URL [-p PLUGIN]

Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation

options:
  -h, --help            show this help message and exit
  -u URL, --url URL     Base URL of the WordPress site
  -p PLUGIN, --plugin PLUGIN
                        Plugin slug (default: Yoast SEO)

example:

root@kitploit:~
python CVE-2024-11972.py -u "http://example.com" -p "plugin-slug"
Download Tool