A critical vulnerability (CVE-2025-6463) in the Forminator WordPress plugin threatens over 600,000 websites, allowing attackers to take complete control without authentication. The flaw exploits inadequate input validation to delete critical files like wp-config.php, forcing sites into set...
Researchers have discovered hackers exploiting WordPress's "mu-plugins" directory to hide malware that enables remote access and visitor redirections. These must-use plugins automatically execute without dashboard activation, making them less visible during security checks. Three malicious...
A coordinated campaign targeting Server-Side Request Forgery (SSRF) vulnerabilities has been detected by GreyNoise, with approximately 400 IP addresses simultaneously exploiting multiple vulnerabilities across platforms. The attacks primarily target organizations in the US, Germany, Singap...
A sophisticated WordPress attack has infected over 1,000 websites with four persistent backdoors, including a fake "Ultra SEO Processor" plugin and malicious code injections. The campaign, operating through cdn.csyndication[.]com, installs SSH keys and executes remote commands. Separately,...
A widespread malware campaign has compromised over 5,000 WordPress sites by creating unauthorized admin accounts and installing malicious plugins through the wp3[.]xyz domain. The attack steals admin credentials and sensitive data, transmitting them disguised as image requests. Security ex...
