SecurityTechRadarabout 12 hours ago
WooCommerce Plugin Exploited in PHP Backdoor Attacks
3 min read
Security firm Defiant warned of active exploitation of the Wholesale Lead Capture Plugin for WooCommerce, tracked as CVE-2026-27540. Attackers are using an unauthenticated file upload flaw to deploy PHP webshells, potentially taking over WordPress sites.
Level
Hype check
Tap to vote and see what everyone thinks.