Hacking campaign targets sites using WordPress WooCommerce Payments Plugin

Threat actors are actively exploiting a critical flaw, tracked as CVE-2023-28121, in the WooCommerce Payments WordPress plugin. Threat actors are actively exploiting a recently disclosed critical vulnerability, tracked as CVE-2023-28121 (CVSS score: 9.8), in the WooCommerce Payments WordPress plugin. The flaw is an authentication bypass issue that can be exploited by an unauthenticated attacker to impersonate arbitrary […]

The post Hacking campaign targets sites using WordPress WooCommerce Payments Plugin appeared first on Security Affairs.

authentication authentication bypass breaking news bypass campaign critical critical flaw critical vulnerability cve cve-2023-28121 cvss cybercrime exploited exploiting flaw hacking hacking campaign information security news issue it information security payments pierluigi paganini plugin score threat threat actors vulnerability woocommerce woocommerce payments woocommerce payments plugin wordpress wordpress plugin