Thousands of WordPress sites impacted by Balada Injector campaign

BleepingComputer reports that more than 6,700 WordPress sites leveraging Popup Builder plugin vulnerable to the cross-site scripting bug, tracked as CVE-2023-6000, have been compromised in a new Balada Injector campaign that commenced last month.

balada balada injector bleepingcomputer bug builder campaign compromised cross-site cve injector malware plugin popup reports scripting third-party-code vulnerability management vulnerable wordpress wordpress sites