Cybercriminals Exploiting WooCommerce Payments Plugin Flaw to Hijack Websites

Threat actors are actively exploiting a recently disclosed critical security flaw in the WooCommerce Payments WordPress plugin as part of a massive targeted campaign.
The flaw, tracked as CVE-2023-28121 (CVSS score: 9.8), is a case of authentication bypass that enables unauthenticated attackers to impersonate arbitrary users and perform some actions as the impersonated user, including an

actions attackers authentication authentication bypass bypass campaign case critical cve cve-2023-28121 cvss cybercriminals exploiting flaw hijack payments plugin score security security flaw threat threat actors websites woocommerce woocommerce payments plugin wordpress wordpress plugin