Critical wp2shell WordPress flaws exploited to install webshells:

bleepingcomputer.com/news/security/stolen-updraftcentral-keys-used-to-backdoor-wordpress-sites/

Credibility A−

Oct 21

Stolen UpdraftCentral keys used to backdoor WordPress sites: A threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and ...

bleepingcomputer.com/news/security/unpatched-ahsaycbs-flaws-exploited-to-deploy-webshells-mine-crypto/

Oct 09

Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto: Threat actors are exploiting one critical and one medium-severity vulnerability still ...

golem.de/news/luecken-in-wordpress-laufende-schadcode-attacken-gefaehrden-millionen-von-websites-2607-211105.html

Golem.de

Jul 21

Vulnerabilities in WordPress: Millions of websites are under constant attack - | Golem.de

8 similar articles

bleepingcomputer.com/news/security/hackers-exploit-info-disclosure-bug-in-gravity-smtp-wordpress-plugin/

Jun 19

Hackers exploit info disclosure bug in Gravity SMTP WordPress plugin: Threat actors are exploiting an unauthenticated information disclosure vulnerability in the ...

bleepingcomputer.com/news/security/shapedplugin-update-flow-hacked-to-infect-wordpress-sites/

Jun 18

ShapedPlugin update flow hacked to infect WordPress sites: Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack that ...

bleepingcomputer.com/news/security/optinmonster-wordpress-plugin-hacked-in-cdn-supply-chain-attack/

Jun 15

OptinMonster WordPress plugin hacked in CDN supply-chain attack: WordPress plugins OptinMonster, TrustPulse, and PushEngage have been compromised in a ...

bleepingcomputer.com/news/security/wp-maps-pro-bug-exploited-to-create-admin-accounts-on-wordpress-sites/

May 31

WP Maps Pro bug exploited to create admin accounts on WordPress sites: Hackers are targeting WordPress websites running a vulnerable version of the WP Maps Pro ...

bleepingcomputer.com/news/security/funnel-builder-wordpress-plugin-bug-exploited-to-steal-credit-cards/

May 15

Funnel Builder WordPress plugin bug exploited to steal credit cards: A critical vulnerability in the Funnel Builder plugin for WordPress is being actively ...

bleepingcomputer.com/news/security/avada-builder-wordpress-plugin-flaws-allow-site-credential-theft/

May 15

Avada Builder WordPress plugin flaws allow site credential theft: Two vulnerabilities in the Avada Builder plugin for WordPress, with an estimated one million ...

bleepingcomputer.com/news/security/hackers-exploit-auth-bypass-flaw-in-burst-statistics-wordpress-plugin/

May 14

Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin: Hackers are leveraging a critical authentication bypass vulnerability in the WordPress ...

bleepingcomputer.com/news/security/hackers-are-exploiting-arrayos-ag-vpn-flaw-to-plant-webshells/

Dec 05 25

Hackers are exploiting ArrayOS AG VPN flaw to plant webshells: Threat actors have been exploiting a command injection vulnerability in Array AG Series VPN ...