CERT24WordPress Sites Actively Attacked Through a WooCommerce VulnerabilityLoading data…
CERT24Threat Observatory
Period

WordPress Sites Actively Attacked Through a WooCommerce Vulnerability

Attackers are uploading PHP webshells to WordPress sites by exploiting a critical vulnerability in WooCommerce Wholesale Lead Capture. Wordfence reported more than 100,000 blocked exploitation attempts.

← Back to intelligence

WordPress Sites Actively Attacked Through a WooCommerce Vulnerability

Attackers are uploading PHP webshells to WordPress sites by exploiting a critical vulnerability in WooCommerce Wholesale Lead Capture. Wordfence reported more than 100,000 blocked exploitation attempts.