A widespread malware campaign has compromised over 5,000 WordPress sites by creating unauthorized admin accounts and installing malicious plugins through the wp3[.]xyz domain. The attack steals admin credentials and sensitive data, transmitting them disguised as image requests. Security ex...
A sophisticated credit card skimming campaign targets WordPress e-commerce sites by injecting malicious JavaScript into database tables. The attack focuses on checkout pages, creating fake payment forms that capture and encrypt credit card data before transmitting it to malicious servers. ...
Critical security flaws discovered in Fancy Product Designer WordPress plugin affect over 20,000 installations. Two unpatched vulnerabilities - an Arbitrary File Upload (CVE-2024-51919) and SQL Injection (CVE-2024-51818) - pose severe risks including remote code execution and unauthorized ...
Critical security vulnerabilities discovered in WPLMS WordPress theme plugins affect over 28,000 installations. The flaws include file upload vulnerabilities, authentication bypasses, privilege escalation issues, and SQL injection vulnerabilities in both WPLMS and VibeBP plugins, with seve...
A sophisticated phishing campaign exploiting Google Calendar and Google Drawings has targeted 300 brands across multiple sectors, sending over 4,000 phishing emails in four weeks. The attackers use legitimate-looking calendar invites containing malicious links to Google Forms or Drawings, ...
