#wordpress-security

[ follow ]
#plugin-vulnerability #data-breach #unauthenticated-access #accessibility-plugin #infostealer-malware
Information security
fromTechRepublic
1 month ago

Security Flaw in WordPress Plugin Puts 400,000 Websites at Risk

A critical vulnerability in the Ally WordPress plugin allows unauthenticated attackers to extract sensitive database data including password hashes from hundreds of thousands of affected websites.
Information security
fromTheregister
1 month ago

Crooks compromise WordPress sites, spread infostealers

Attackers compromised legitimate WordPress sites including a US Senate candidate's website to distribute infostealer malware through fake Cloudflare CAPTCHA pages that trick users into running malicious commands.
Privacy professionals
fromThe Hacker News
1 year ago

WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors

A significant phishing campaign is targeting WooCommerce users with fake alerts, prompting them to download malware disguised as security patches.
[ Load more ]