Thousands of sites running WordPress are vulnerable to a critical security flaw in the Hunk Companion plugin.The vulnerability allows for unauthenticated execution of malicious code and is actively being exploited.Less than 12 percent of users have installed the patch, leaving around 9,000 sites at risk.This vulnerability poses a significant and multifaceted threat to the integrity of affected websites.