WordPress Builder Plugin Flaw Exposes 3,300+ Websites To XSS Attack

A recent surge in attacks from a new malware campaign exploits a known vulnerability in the WordPress plugin Popup Builder, infecting over 3,300 websites with XSS attacks. A recent Balada Injector campaign discovered in January exploited a cross-site scripting (XSS) vulnerability tracked as CVE-2023-6000 with a CVSS base score of 8.8. According to Sucuri, they have noticed an […]

The post WordPress Builder Plugin Flaw Exposes 3,300+ Websites To XSS Attack appeared first on GBHackers on Security | #1 Globally …

attack attacks balada balada injector base builder campaign cross-site cross site scripting cve cvss exploited exploits flaw injector january known vulnerability malware malware campaign plugin plugin vulnerability popup score scripting vulnerability websites wordpress wordpress plugin wordpress security xss xss attacks