Hackers target WordPress sites via third-party WooCommerce plugin
Tue Sep 15 2026
Malware
Vulnerability
www.bleepingcomputer.com
Hackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture premium plugin for WordPress to upload a PHP backdoor. [...]