Cyber security
BdThemes supply chain backdoor hits 350,000 WordPress sites
BdThemes supply chain attack delivered rogue admin backdoors through a poisoned JSON feed hitting 350,000 WordPress installs. Here is what to hunt.
#wordpress
3 stories tagged wordpress.
Cyber security
BdThemes JSON attack creates rogue WordPress admin accounts
BdThemes supply chain attack poisoned a remote JSON feed, creating rogue WordPress admins via XSS across 350,000 installs. Audit for hidden admins and webshells now.
Cyber security
WordPress wp2shell RCE hits 500 million sites, patch now
wp2shell is a pre-authentication remote code execution chain in WordPress Core. Two CVEs let anonymous attackers run code on 6.9 and 7.0 sites with no plugins.