Skip to content
OriginalSign in
Image: The Hacker News

The Hacker Newsinfo@thehackernews.com (The Hacker News)

WooCommerce Plugin Flaw Lets Attackers Plant Web Shells

Part of the WooCommerce story · since 15 Sep

Quiet for 6 weekslast report 16 Sep4 articles4 outlets
15 Sep · SecurityOnline first9 Oct17 OctNowThis article2nd of 4
  • Tue 15 Sep, 02:21 UTC. SecurityOnline, first report. Hackers Exploit WooCommerce Plugin Flaw to Upload PHP Web Shells.
  • Wed 16 Sep, 06:45 UTC. The Hacker News, its first report on the story. WooCommerce Plugin Flaw Lets Attackers Plant Web Shells. This article, 2nd of 4.
  • Wed 16 Sep, 14:51 UTC. SOCRadar, its first report on the story. Attackers Exploit WooCommerce Plugin Flaw to Upload PHP Web Shells.
  • Wed 16 Sep, 15:27 UTC. Infosecurity, its first report on the story. Attackers Exploit Critical WooCommerce Plugin Flaw to Upload Webshells.

Attackers are exploiting a vulnerability in the WooCommerce Wholesale Lead Capture plugin, allowing them to plant PHP web shells on affected sites. This compromise can lead to severe security risks, including unauthorized access and control over the web server. Users are advised to update their plugins and implement security measures to mitigate the risk of these attacks.

How the story developed

All 4 articles
Quiet for 6 weekslast report 16 Sep4 articles4 outlets

4 articles from 4 outlets since 15 Sep. Quiet since 16 Sep. This was the 2nd report, 1 day after the first.

Now15 Sep1617First reportSecurityOnline · 15 Sep, 02:21This article2nd of 4 · day 1
  • Tue 15 Sep, 02:21 UTC. SecurityOnline, first report. Hackers Exploit WooCommerce Plugin Flaw to Upload PHP Web Shells.
  • Wed 16 Sep, 06:45 UTC. The Hacker News, its first report on the story. WooCommerce Plugin Flaw Lets Attackers Plant Web Shells. This article, 2nd of 4.
  • Wed 16 Sep, 14:51 UTC. SOCRadar, its first report on the story. Attackers Exploit WooCommerce Plugin Flaw to Upload PHP Web Shells.
  • Wed 16 Sep, 15:27 UTC. Infosecurity, its first report on the story. Attackers Exploit Critical WooCommerce Plugin Flaw to Upload Webshells.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 4 articles as a list
  1. Tue 15 SepDay 01
    1. Hackers Exploit WooCommerce Plugin Flaw to Upload PHP Web Shells02:21 · SecurityOnline · First report
  2. Wed 16 SepDay 13
    1. WooCommerce Plugin Flaw Lets Attackers Plant Web Shells06:45 · The Hacker News · This article, 2nd of 4
    2. Attackers Exploit WooCommerce Plugin Flaw to Upload PHP Web Shells14:51 · SOCRadar
    3. Attackers Exploit Critical WooCommerce Plugin Flaw to Upload Webshells15:27 · Infosecurity

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in