[HackerNews] Over 280,000 WordPress Sites Attacked Using WPGateway Plugin Zero-Day Vulnerability

SecOpsNews / news

RSS items as GitHub Issues for the discerning engineering leader or security professional

MIT License

34 stars 0 forks source link

[HackerNews] Over 280,000 WordPress Sites Attacked Using WPGateway Plugin Zero-Day Vulnerability #2616

Closed github-actions[bot] closed 2 years ago

github-actions[bot] commented 2 years ago

A zero-day flaw in the latest version of a WordPress premium plugin known as WPGateway is being actively exploited in the wild, potentially allowing malicious actors to completely take over affected sites. Tracked as CVE-2022-3180 (CVSS score: 9.8), the issue is being weaponized to add a malicious administrator user to sites running the WPGateway plugin, WordPress security company Wordfence

https://thehackernews.com/2022/09/over-280000-wordpress-sites-attacked.html

github-actions[bot] commented 2 years ago

This issue is stale because it has been open 1 day with no activity. Remove stale label or comment or this will be closed in 1 day.

github-actions[bot] commented 2 years ago

This issue was closed because it has been stale with no activity.