PSA: Fake CVE-2023-45124 Phishing Scam Tricks Users Into Installing Backdoor Plugin

The Wordfence Threat Intelligence Team has recently been informed of a phishing campaign targeting WordPress users. The Phishing email claims to be from the WordPress team and warns of a Remote Code Execution vulnerability on the user’s site with an identifier of CVE-2023-45124, which is not currently a valid CVE. The email prompts the victim ...
Read More

The post PSA: Fake CVE-2023-45124 Phishing Scam Tricks Users Into Installing Backdoor Plugin appeared first on Wordfence.

backdoor campaign claims code code execution cve email fake intelligence phishing phishing campaign phishing scam plugin psa remote code remote code execution scam targeting team threat threat intelligence valid vulnerability wordfence wordpress wordpress security