~/article/hackers-target-wordpress-sites-via-third-party-woocommerce-plugin-6f708q

high2026-09-15 14:45 UTCSource: BleepingComputer

Hackers target WordPress sites via third-party WooCommerce plugin

Hackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture premium plugin for WordPress to upload a PHP backdoor.

Read at the source

Summary written for cymesh.dev. The full article lives at BleepingComputer.

Topics

malware

~/cymesh.net

Certificates expire quietly

cymesh.net watches your TLS and SSL certificates and warns you before one lapses.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Talk to us See cymesh.net

~/related/hackers-target-wordpress-sites-via-third-party-woocommerce-plugin-6f708q

2026-09-15 20:34 UTC[info]

Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites

BleepingComputermalware

2026-09-15 18:54 UTC[info]

KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens

The Hacker Newsmalware

2026-09-15 16:45 UTC[info]

VectraRAT Can Hack Windows Enterprises for $250 per Month

Dark Readingmalware windows

2026-09-15 16:29 UTC[info]

Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists

The Hacker Newsmalware windows

2026-09-15 15:23 UTC[info]

BambooToken Malware Uses MQTT to Control Windows and Linux Systems

The Hacker Newsmalware linux windows

2026-09-15 15:00 UTC[info]

BambooToken malware controls Windows and Linux systems via MQTT

BleepingComputermalware linux windows