Hackers exploited WordPress Popup Builder plugin flaw to compromise 3,300 sites

Threat actors are hacking WordPress sites by exploiting a vulnerability, tracked as CVE-2023-6000, in old versions of the Popup Builder plugin. In January, Sucuri researchers reported that Balada Injector malware infected over 7100 WordPress sites using a vulnerable version of the Popup Builder WordPress plugin. Sucurity reported that on December 13th, the Balada Injector campaign started infecting […]

balada balada injector breaking news builder compromise cve cybercrime exploited exploiting flaw hackers hacking information security news injector it information security january malware old pierluigi paganini plugin popup researchers sucuri threat threat actors version vulnerability vulnerable wordpress wordpress plugin wordpress sites