Mass attack on WordPress sites targets bug in WooCommerce plugin
The ongoing campaign is exploiting a now-patched vulnerability in the popular ecommerce plugin that can give hackers admin access to websites.
Source: scmagazine.com
📰 Ram Gall News
Ram Gall News Today
Fast, Ad-Free News Updates
Stay updated with breaking news from Ram Gall. Real-time updates on events, politics, business and more.
Attackers Pummel Millions of Websites via Critical WooCommerce Payments Flaw
A barrage of targeted attacks against vulnerable installations peaked at 1.3 million against 157,000 sites over the weekend, aimed at unauthenticated code execution.
Michael Mazzolini Julien Ahrens Woocommerce Hackerone Wordpress Woocommerce Payments Woocommerce Payments Sites Vulnerable Despite
Source: darkreading.com
Up to 1.5 million WordPress sites could be hit by this security flaw - so patch up now
A popular WordPress plugin could have been exposing thousands of websites to potential takeover attacks.
Source: techradar.com
Over 280,000 WordPress sites may have been hijacked by zero-day hiding in popular plugin
Over 280,000 WordPress sites may have been taken over thanks to zero-day in popular plugin.
Source: techradar.com
Zero-day in WPGateway Wordpress plugin actively exploited in attacks
The Wordfence Threat Intelligence team warned today that WordPress sites are actively targeted with exploits targeting a zero-day vulnerability in the WPGateway premium plugin.
Source: bleepingcomputer.com
Uninstall Now: Critical WordPress Plug-In Flaw Exploited
Hackers are exploiting a critical zero-day flaw in the WordPress plug-in Fancy Product Designer, which allows remote code execution, the Wordfence Threat
United States Executionakshaya Asokan Defiant Inc Risk Management Critical Wordpress Plug In Flaw Exploited Fancy Product Designer
Source: bankinfosecurity.com
Critical WordPress Plugin Flaw Allows Site Takeover
A patch in the NextGen Gallery WordPress plugin fixes critical and high-severity cross-site request forgery flaws. Researchers are urging WordPress websites that utilize the NextGen Gallery plugin to apply a patch addressing critical and high-severity flaws. The NextGen Gallery plugin, which is installed on 800,000 WordPress websites, allows sites to upload photos in batch quantities, import metadata and edit image thumbnails. Researchers discovered two cross-site request forgery (CSRF) flaws ...
Nextgen Gallery Ram Gall Cross Site Request Forgery Legacy Template Nextgen Gallery Version Contact Form
Source: threatpost.com