Sploitus New Vulnerabilities Discovered in Kubernetes and WordPress
Article Content
- •CVE-2024-10220 allows arbitrary command execution in Kubernetes.
- •CVE-2017-20192 enables stored XSS in WordPress Formidable Forms.
- •Both vulnerabilities have associated proof-of-concept code available.
Two significant vulnerabilities have been reported: CVE-2024-10220 and CVE-2017-20192. CVE-2024-10220 affects gitRepo volumes in Kubernetes, allowing arbitrary command execution on Kubernetes nodes. This vulnerability was published on November 22, 2024, with a proof-of-concept (PoC) available since November 21, 2024. The testing repository is part of security research at the University of Central Oklahoma, but it contains a malicious Git hook and should not be used in production. CVE-2017-20192, related to Formidable Forms in WordPress, allows stored XSS attacks and was published on October 16, 2024. A PoC for this vulnerability is expected to be publicly available by December 24, 2025. Both vulnerabilities pose risks to their respective platforms, with CVE-2024-10220 being particularly critical due to its potential for remote command execution.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track CVE-2017-20192 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical GitLab Vulnerabilities Exploited Within Hours of Disclosure On September 10, 2026, GitLab released patches for critical vulnerabilities CVE-2026-85706 and CVE-2026-87719. CVE-2026-85706, a path traversal flaw, allows unauthenticated users to read arbitrary files from GitLab servers, while CVE-2026-87719 enables credential theft via insecure deserialization. Both…