Do Son WordPress, the world's most popular CMS, is facing a significant security threat in the form of a widespread supply chain attack
wordpress
The flaw, identified as CVE-2024-3105, allows remote code execution (RCE) and poses a severe risk to websites using this plugin
The attack begins with hackers compromising websites and inserting malicious code, often through the legitimate WordPress plugin "Hustle."
WordPress, the world's most popular CMS, is facing a wave of targeted attacks exploiting critical vulnerabilities in several plugins
CVE-2024-3820, rated with a maximum severity score of 10 (CVSS 10), could allow attackers to inject malicious SQL code
attackers are leveraging an obscure WordPress plugin to install server-side malware, harvesting credit card details from WooCommerce online stores
CVE-2024-4709, CVE-2024-2771, and CVE-2024-2782, range from cross-site scripting (XSS) to unauthorized access and privilege escalation
CVE-2024-3368 enables attackers to inject malicious code into websites, potentially leading to unauthorized access, data theft
CVE-2024-3806 (CVSS 9.8): An unauthenticated LFI vulnerability within the porto_ajax_posts function of the Porto theme
Hackers are actively exploiting a flaw in the LiteSpeed Cache Plugin for WordPress, a tool installed on over 5 million websites worldwide
CVE-2024-4439 (CVSS score of 7.2) pertains to a stored Cross-Site Scripting (XSS) flaw in the WordPress Core.
Security analyst Ben Martin revealed this insidious new tactic. It starts when you visit a website infected with the Mal.Metrica malware
The popular Content Management System (CMS) WordPress has released a critical security update, addressing a XSS vulnerability
a popular choice for automating content imports on WordPress websites, contains two dangerous flaws (CVE-2024-27956 and CVE-2024-27954)
Tracked as CVE-2024-1317 (CVSS 8.8), this flaw was pinpointed within all versions up to and including 4.4.2 of the Feedzy plugin
Wordfence has sounded the alarm, reporting over 1,400 blocked attacks targeting CVE-2023-6700 in the past 24 hours alone
Dubbed CVE-2024-1072, this flaw was a gaping hole rated 8.2 out of 10 on the severity scale. This high rating underscored the potential havoc
Discovered by vigilant researchers at Trend Micro, the second vulnerability remedied in this update was the RCE POP chain flaw
Dubbed CVE-2023-6933, this security flaw has been classified with a critical severity rating of 9.8 out of 10
With a CVSS score of 8.6, this vulnerability exposes a chink in the armor of many websites, leaving them vulnerable to unauthenticated attacks
In the ever-evolving landscape of cyber threats, MageCart malware emerges as a formidable foe, especially for WordPress users
Unauthenticated attackers can exploit the CVE-2023-6750 (CVSS 9.8) flaw to download database backups made with the plugin.