{"metadata": {"vulnerability": "CVE-2024-9707", "count": 42, "kinds": {"milestone": 4, "sighting": 18, "kev": 11, "other": 9}}, "data": [{"timestamp": "2024-10-09T19:08:46.516Z", "date_only": false, "value": "2024-10-09T19:08:46.516Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-9707", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-10-10T00:00:00Z", "date_only": false, "value": "2024-10-10T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2024-9707", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2024-10-11T06:50:18.867Z", "date_only": false, "value": "2024-10-11T06:50:18.867Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-9707", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-10-11T13:15:21Z", "date_only": false, "value": "2024-10-11T13:15:21Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8CM3-4QFX-PWVC", "record": "GHSA-8CM3-4QFX-PWVC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-10-11T13:15:21.233Z", "date_only": false, "value": "2024-10-11T13:15:21.233", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-9707", "record": "FKIE_CVE-2024-9707", "field": "published"}, {"timestamp": "2024-10-11T15:30:33Z", "date_only": false, "value": "2024-10-11T15:30:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8CM3-4QFX-PWVC", "record": "GHSA-8CM3-4QFX-PWVC", "field": "published"}, {"timestamp": "2024-10-11T15:30:33Z", "date_only": false, "value": "2024-10-11T15:30:33Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8CM3-4QFX-PWVC", "record": "GHSA-8CM3-4QFX-PWVC", "field": "modified"}, {"timestamp": "2024-10-11T15:33:42.352Z", "date_only": false, "value": "2024-10-11T15:33:42.352939Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-9707", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-11T15:33:42.352Z", "date_only": false, "value": "2024-10-11T15:33:42.352939Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-9707", "record": "FKIE_CVE-2024-9707", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-11T15:41:40.139Z", "date_only": false, "value": "2024-10-11T15:41:40.139Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-9707", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-11T16:10:23Z", "date_only": false, "value": "2024-10-11T16:10:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/7657", "record": "CVE-2024-9707", "field": "creation_timestamp", "uuid": "e3a8c5d4-c6c1-4403-aacb-a00c15df2da2", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-9707 - Wordpress Hunk Companion Plugin Remote Plugin Installation/Activation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-9707 \nPublished : Oct. 11, 2024, 1:15 p.m. | 36\u00a0minutes ago \nDescription : The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the /wp-json/hc/v1/themehunk-import REST API endpoint in all versions up to, and including, 1.8.4. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins which can be leveraged to achieve remote code execution if another vulnerable plugin is installed and activated. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/7657"}, {"timestamp": "2025-01-13T04:00:07Z", "date_only": false, "value": "2025-01-13T04:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hiSHwf5P-4Z1qIx5PQAKOBZYsZAfhTVeVVzmDBF29dx0nEw", "record": "CVE-2024-9707", "field": "creation_timestamp", "uuid": "4b0b7d68-df59-4a3c-8c9a-084f4bd58ff2"}, {"timestamp": "2025-02-08T23:20:27Z", "date_only": false, "value": "2025-02-08T23:20:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3882", "record": "CVE-2024-9707", "field": "creation_timestamp", "uuid": "dd4b6454-1949-46b1-a76d-40ddc2e602c6", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-9707\n\ud83c\udfe2 Vendor: themehunk\n\ud83d\udda5\ufe0f Product: hunk_companion\n\ud83d\udd39 Description: The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the /wp-json/hc/v1/themehunk-import REST API endpoint in all versions up to, and including, 1.8.4. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins which can be leveraged to achieve remote code execution if another vulnerable plugin is installed and activated.\n\ud83d\udccf Published: 2024-10-11T00:00:00Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/hunk-companion/hunk-companion-184-missing-authorization-to-unauthenticated-arbitrary-plugin-installationactivation", "url": "https://t.me/DarkWebInformer_CVEAlerts/3882"}, {"timestamp": "2025-05-31T21:02:24.296Z", "date_only": false, "value": "2025-05-31T21:02:24.296794Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lqingcnbte2u", "record": "CVE-2024-9707", "field": "creation_timestamp", "uuid": "d6833aec-dbe8-46cc-b7a1-151813f5c35f", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lqingcnbte2u"}, {"timestamp": "2025-10-24T07:29:14Z", "date_only": false, "value": "2025-10-24T07:29:14+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-9707", "field": "timestamps.asserted_at", "uuid": "801b3a00-316f-4f85-904e-d06d012e60fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-24T07:29:14Z", "date_only": false, "value": "2025-10-24T07:29:14+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-9707", "field": "timestamps.first_seen_at", "uuid": "801b3a00-316f-4f85-904e-d06d012e60fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-24T07:29:14Z", "date_only": false, "value": "2025-10-24T07:29:14+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-9707", "field": "status.status_updated_at", "uuid": "801b3a00-316f-4f85-904e-d06d012e60fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-24T07:29:14.921Z", "date_only": false, "value": "2025-10-24T07:29:14.921Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-9707", "field": "evidence.0.details.added_date", "uuid": "801b3a00-316f-4f85-904e-d06d012e60fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-24T07:29:14.921Z", "date_only": false, "value": "2025-10-24T07:29:14.921568Z", "kind": "sighting", "label": "Exploited", "source": "https://www.wordfence.com/blog/2025/10/mass-exploit-campaign-targeting-arbitrary-plugin-installation-vulnerabilities/", "record": "CVE-2024-9707", "field": "creation_timestamp", "uuid": "130cd553-8d71-4920-8848-1db907c132ec", "url": "https://www.wordfence.com/blog/2025/10/mass-exploit-campaign-targeting-arbitrary-plugin-installation-vulnerabilities/"}, {"timestamp": "2025-10-27T09:33:51Z", "date_only": false, "value": "2025-10-27T09:33:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Darkcrai86/95fecaab4bd13df2c4a53b0485496346", "record": "CVE-2024-9707", "field": "creation_timestamp", "uuid": "9e83e46f-73c4-46e5-8e2b-05485e9d2268", "url": "https://gist.github.com/Darkcrai86/95fecaab4bd13df2c4a53b0485496346"}, {"timestamp": "2025-10-28T10:33:24.908Z", "date_only": false, "value": "2025-10-28T10:33:24.908892Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3m4aq7tb2mr2j", "record": "CVE-2024-9707", "field": "creation_timestamp", "uuid": "e65d325e-53ef-4c0c-bb38-c4aa06f6fe81", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3m4aq7tb2mr2j"}, {"timestamp": "2025-10-29T07:57:31.803Z", "date_only": false, "value": "2025-10-29T07:57:31.803104Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-91df1732-73af074958dee773", "record": "CVE-2024-9707", "field": "creation_timestamp", "uuid": "bfc93233-9a0b-447f-9bc4-83553e09607b", "url": "https://poliverso.org/objects/0477a01e-91df1732-73af074958dee773"}, {"timestamp": "2025-11-12T14:27:42Z", "date_only": false, "value": "2025-11-12T14:27:42+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2024-9707", "field": "timestamps.asserted_at", "uuid": "1a8764b4-275a-4298-bf84-ba3b253d6e71", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-11-12T14:27:42Z", "date_only": false, "value": "2025-11-12T14:27:42+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-9707", "field": "timestamps.first_seen_at", "uuid": "1a8764b4-275a-4298-bf84-ba3b253d6e71", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-12-23T00:00:00Z", "date_only": false, "value": "2025-12-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-23)", "record": "CVE-2024-9707", "field": "creation_timestamp", "uuid": "5e8dfcbb-d6e5-4fe7-ba4e-3f9f5bc41104"}, {"timestamp": "2026-04-08T17:11:22.905Z", "date_only": false, "value": "2026-04-08T17:11:22.905Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-9707", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T17:11:22.905Z", "date_only": false, "value": "2026-04-08T17:11:22.905Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2024-9707", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:25:06.080Z", "date_only": false, "value": "2026-06-17T08:25:06.080", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-9707", "record": "FKIE_CVE-2024-9707", "field": "lastModified"}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-9707", "field": "timestamps.recorded_at", "uuid": "801b3a00-316f-4f85-904e-d06d012e60fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:43.936Z", "date_only": false, "value": "2026-06-19T12:42:43.936585Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/801b3a00-316f-4f85-904e-d06d012e60fb", "record": "CVE-2024-9707", "field": "creation_timestamp", "uuid": "3e61a2f3-a3ce-481e-aeea-95ff7269415d", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/801b3a00-316f-4f85-904e-d06d012e60fb"}, {"timestamp": "2026-06-19T12:45:50.273Z", "date_only": false, "value": "2026-06-19T12:45:50.273310Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/af415acd-3848-4190-8843-3f06cf6ac1d7", "record": "CVE-2024-9707", "field": "creation_timestamp", "uuid": "a9c731af-286a-4ddc-a96a-9df6b9d101ce", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/af415acd-3848-4190-8843-3f06cf6ac1d7"}, {"timestamp": "2026-06-22T17:37:07.010Z", "date_only": false, "value": "2026-06-22T17:37:07.010162Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3movgfpa5vu2p", "record": "CVE-2024-9707", "field": "creation_timestamp", "uuid": "ba13e434-3d18-4f7f-9a9b-eeabe2f39237", "url": "https://bsky.app/profile/cyberhub.blog/post/3movgfpa5vu2p"}, {"timestamp": "2026-06-23T14:03:16.901Z", "date_only": false, "value": "2026-06-23T14:03:16.901729Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/028faba2-48c9-4ced-9547-a931c176fa01", "record": "CVE-2024-9707", "field": "creation_timestamp", "uuid": "b1b3848e-b7ec-4544-85da-398d3d93f850", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/028faba2-48c9-4ced-9547-a931c176fa01"}, {"timestamp": "2026-06-30T09:22:58.341Z", "date_only": false, "value": "2026-06-30T09:22:58.341034Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1a49890e-0379-4539-a1aa-6d888520362d", "record": "CVE-2024-9707", "field": "creation_timestamp", "uuid": "cb70a52c-9ccf-4e6f-b370-d9e4e2a1edb8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1a49890e-0379-4539-a1aa-6d888520362d"}, {"timestamp": "2026-07-01T07:18:22.753Z", "date_only": false, "value": "2026-07-01T07:18:22.753622Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/1a8764b4-275a-4298-bf84-ba3b253d6e71", "record": "CVE-2024-9707", "field": "creation_timestamp", "uuid": "f4d55986-d093-4fca-a435-045aafafe3e4", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/1a8764b4-275a-4298-bf84-ba3b253d6e71"}, {"timestamp": "2026-07-22T05:00:04.914Z", "date_only": false, "value": "2026-07-22T05:00:04.914043Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/1076", "record": "CVE-2024-9707", "field": "creation_timestamp", "uuid": "b30cdb96-c9c2-4e36-98fc-a2e32a218845", "url": "https://t.me/pphm_HackerNews/1076"}, {"timestamp": "2026-07-23T00:00:25.267Z", "date_only": false, "value": "2026-07-23T00:00:25.267199Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pphm_HackerNews/1076", "record": "CVE-2024-9707", "field": "creation_timestamp", "uuid": "429b8a5c-3bfb-47db-b4f1-20c12a9f8754", "url": "https://t.me/pphm_HackerNews/1076"}, {"timestamp": "2026-08-01T10:15:08.623Z", "date_only": false, "value": "2026-08-01T10:15:08.623890Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-31)", "record": "CVE-2024-9707", "field": "creation_timestamp", "uuid": "1475dd2e-2bb4-431d-9f04-f02c59f3ef44"}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2024-9707", "field": "timestamps.last_seen_at", "uuid": "1a8764b4-275a-4298-bf84-ba3b253d6e71", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": true, "value": "2026-11-04", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2024-9707", "field": "evidence.0.details.observation_date", "uuid": "1a8764b4-275a-4298-bf84-ba3b253d6e71", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2024-9707", "field": "status.status_updated_at", "uuid": "1a8764b4-275a-4298-bf84-ba3b253d6e71", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T01:00:01Z", "date_only": false, "value": "2026-11-06T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2024-9707", "field": "timestamps.recorded_at", "uuid": "1a8764b4-275a-4298-bf84-ba3b253d6e71", "status": {"status_reason": "confirmed", "exploited": true}}]}