Hurrakify
Hurrakify has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Server-Side Request Forgery (SSRF), behind 1 of the records (100%).
The one issue recorded for Hurrakify has a vendor fix available, so running the current release closes it.
All of these findings were reported by ardias. Hurrakify is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-54330Hurrakify <= 2.4 - Unauthenticated Server-Side Request Forgery
Read the full analysisVulnerability Records
Hurrakify
Author
hurraki
Hurrakify adds tooltips to articles. That means: Hard-to-read word are underlinded. Moving over with the cursor shows a explanation about the word. Hurrakify gets its information from the Hurraki Plain Language Lexicon. Install and activate. Hurrakify does the rest. To see the Plugin in action have a look at the Hurraki Blog. Hurraki is a dictionary in Plain Language. Many written and spoken words are complicated. Some people don’t understand difficult words and text. With Plain Language, everybody can understand. For anyone – free to use. Plain Language should be available in many languages. Join Hurraki and help people to understand. Settings There are a few settings for Hurrakify. After the installation, there is the new menu item Hurrakify. The following settings are possible: Where should Hurrakify get the tooltips from? From the German, English, Hungarian, Italian or Spanish Dictionary. In addition, you can adjust in which areas the tooltips should be added to the blog. And how many tooltips per page should be displayed at maximum.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C