WordPress: Lieferkettenangriff auf Plug-ins gefährdet 1,2 Millionen Instanzen
Teaser from the source
Bei einer Supply-Chain-Attacke installieren Angreifer Backdoors durch die WordPress-Plug-ins OptinMonster, TrustPulse und PushEngage.
This is the RSS-feed teaser. Read the full article at the original source.
Read at heise SecurityMore on WordPress
Other advisories
- HighCVE-2026-119977WordPress: Schwachstelle ermöglicht Codeausführung
- HighCVE-2026-66570Nickboss WordPress File Upload: Cross-Site-Scripting (XSS)
- HighCVE-2026-66570Nickboss WordPress File Upload: Cross-Site-Scripting (XSS)
- Not ratedhkcert:wordpress-multiple-vulnerabilities_20261102WordPress Multiple Vulnerabilities
- Not ratedosv:CLEANSTART-2025-GV56895Tutor LMS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘question_id’ parameter in versions up to, and including, 2
- MediumCVE-2026-15272Shamalli Web 2.0 Directory plugin for WordPress: SQL-Injection
- MediumCVE-2026-15272Shamalli Web 2.0 Directory plugin for WordPress: SQL-Injection
- HighCVE-2026-110530Radgeek FeedWordPress: Cross-Site-Scripting (XSS)
Other news entries
- CISA flags WordPress RCE flaw as actively exploited in attacksNewsBleepingComputer
- NCSC-2026-0466 [1.00] [L/H] Kwetsbaarheid verholpen in WordPress CoreNewsNCSC-NL
- CISA Confirms Hackers Exploiting WordPress Core Flaw During Software UpgradesNewsThe Hacker News
- Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet CredentialsNewsThe Hacker News
- WordPress: Schwachstelle ermöglicht CodeausführungVulnerabilityBSI CERT-Bund
- PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPressNewsSecurityWeek
- WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursNewsThe Hacker News
- Fresh WordPress Vulnerability in Attackers’ CrosshairsNewsSecurityWeek
ID