Threat Actors Exploit Critical Flaw in WooCommerce Plugin for WordPress

Attackers are actively leveraging a critical vulnerability in the WooCommerce Wholesale Lead Capture premium plugin for WordPress to deploy PHP backdoors…

If you manage WordPress sites running the WooCommerce Wholesale Lead Capture plugin, immediately verify its presence and update to the latest version from the developer. Review access logs and the file system for suspicious activity or anomalous PHP files. Consider disabling the plugin temporarily if a patch is not yet available.