Balada Injector campaign compromises thousands of WordPress sites

SecurityWeek reports that more than 17,000 WordPress sites, including 9,000 sites vulnerable to the recently addressed TagDiv Composer front-end page builder plugin flaw, tracked as CVE-2023-3169, have been infected as part of the long-running Balada Injector campaign.

api security balada balada injector builder campaign composer cve end flaw front-end injector page plugin reports running security-staff-acquisition-development third-party-code vulnerable wordpress