28 02, 2023

Critical vulnerabilities in Houzez WordPress theme lead to privilege escalation attacks

By | 2023-02-28T22:09:59+05:30 February 28th, 2023|Internet Security, malicious cyber actors, Malware, Security Advisory, Security Update, vulnerability, wordpress|

Two critical severity vulnerabilities in the Houzez theme and plugin for WordPress are actively being [...]

4 01, 2023

RCE Vulnerability (CVE-2022-45359) in Yith WooCommerce Gift Cards Plugin Exploited in Attacks

By | 2023-01-04T06:56:31+05:30 January 4th, 2023|BOTNET, Compromised, Exploitation, Internet Security, IOC's, malicious cyber actors, Malicious extension, Malware, Security Advisory, Security Update, Software Issues, Targeted Attacks, Tips, vulnerability, wordpress|

Hackers are actively exploiting a critical vulnerability, tracked as CVE-2022-45359 (CVSS v3: 9.8), affecting the WordPress plugin [...]

15 09, 2022

WordPress Sites Compromised Due to FishPig Supply Chain Attack

By | 2022-09-15T19:13:18+05:30 September 15th, 2022|Malware, Security Advisory, Security Update, Targeted Attacks, Tips, wordpress|

Threat actors infected FishPig’s distribution server as part of a supply chain attack. The vendor’s service [...]

9 09, 2022

Hackers Exploit Zero-Day in WordPress BackupBuddy Plugin in ~5 Million Attempts

By | 2022-09-09T22:08:40+05:30 September 9th, 2022|Exploitation, Malware, Security Advisory, Security Update, vulnerability, wordpress|

A zero-day flaw in a WordPress plugin known as BackupBuddy is being actively exploited, WordPress safety firm [...]

24 08, 2022

Hackers Using Fake DDoS Protection Pages to Distribute Malware

By | 2022-08-24T21:21:00+05:30 August 24th, 2022|Malicious extension, Malware, Security Advisory, Security Update, wordpress|

Recently security experts from Sucuri, spotted JavaScript injections targeting WordPress sites to display fake DDoS [...]

Subscribe to our newsletter to receive security tips everday!