Filtered by category: Infosecurity Magazine, tag: vulnerability × Clear
PHP Webshell Campaign Targets WordPress Through Critical WooCommerce Plugin Bug
Matched: WordPress
Attackers are exploiting a critical vulnerability in a third-party WooCommerce plugin to upload PHP webshells onto WordPress sites, gaining persistent backdoor access. The flaw allows unauthenticated file uploads, enabling remote code execution. Site owners are urged to update the affected plugin immediately and scan for indicators of compromise, including suspicious PHP files in upload directories.
Researchers Build WordPress Exploit Using OpenAI's GPT
Matched: WordPress
Researchers used OpenAI's GPT model to develop an exploit chain targeting a critical WordPress vulnerability. The work demonstrates AI's growing capability to assist in cybersecurity research, raising concerns about how the same tools could lower the barrier for malicious actors to develop working exploits from known vulnerabilities.