Search cyberveille.decio.ch

Found 5 bookmarks

Custom sorting

Researchers Uncover Active Exploitation of WordPress Plugin Vulnerabilities

Researchers have discovered several vulnerabilities in popular WordPress plugins that allow attackers to create rogue admin accounts. #attacks #breach #computer #cyber #data #hack #hacker #hacking #how #information #malware #network #news #ransomware #security #software #the #to #today #updates #vulnerability

#thehackernews #EN #2024 #WordPress #Plugin #Vulnerabilities

·thehackernews.com·May 30, 2024

Researchers Uncover Active Exploitation of WordPress Plugin Vulnerabilities

WP Automatic WordPress plugin hit by millions of SQL injection attacks

Hackers have started to target a critical severity vulnerability in the WP Automatic plugin for WordPress to create user accounts with administrative privileges and to plant backdoors for long-term access.

#bleepingcomputer #EN #2024 #Actively-Exploited #Plugin #SQL-Injection #Vulnerability #WordPress #WP-Automatic

·bleepingcomputer.com·Apr 27, 2024

WP Automatic WordPress plugin hit by millions of SQL injection attacks

Unauthenticated function injection vulnerability in WordPress Shortcode Addons plugin (unpatched). – NinTechNet

The WordPress Shortcode Addons plugin version 3.2.5 and below is prone to an unauthenticated function injection vulnerability.

#nintechnet #EN #2024 #WordPress #Shortcode #Addons #plugin #vulnerability

·blog.nintechnet.com·Apr 22, 2024

Unauthenticated function injection vulnerability in WordPress Shortcode Addons plugin (unpatched). – NinTechNet

Security Flaw in WP-Members Plugin Leads to Script Injection

Attackers could exploit a high-severity cross-site Scripting (XSS) vulnerability in the WP-Members Membership WordPress plugin to inject arbitrary scripts into web pages, according to an advisory from security firm Defiant.

#securityweek #EN #2024 #plugin #WP #Wordpress #WP-Members #Injection #vulnerability

·securityweek.com·Apr 4, 2024

Security Flaw in WP-Members Plugin Leads to Script Injection

Balada Injector Infects Over 7,100 WordPress Sites Using Plugin Vulnerability

Over 7,100 WordPress sites have been hit by the 'Balada Injector' malware, which exploits sites using a vulnerable version of the Popup Builder plugin

#thehackernews #2024 #EN #Balada #WP #plugin #WordPress #malware #Injector #infected

·thehackernews.com·Jan 20, 2024

Balada Injector Infects Over 7,100 WordPress Sites Using Plugin Vulnerability