PHP webshell

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 16, 2026
Last mentionedSep 16, 2026

Timeline

1 articles · newest first

PHP Webshell Campaign Targets WordPress Through Critical WooCommerce Plugin Bug

Wordfence blocked over 100,000 exploitation attempts against CVE-2026-27540 in WooCommerce Wholesale Lead Capture, letting attackers upload PHP webshells to WordPress sites.

Infosecurity MagazineSep 16, 15:00 UTC · Sep 16, 2026Exploit / PoCExploitedCVE-2026-275402

Related CVEs

by mentions

CVE-2026-275403%9.0
Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd
published Mar 19, 2026WordPress, E-commercePoC

Appears with

Patchstackorganization · 1
Rymera Web Coorganization · 1
Patchstackvendor · 1
Wordfenceorganization · 1
WooCommerce Wholesale Lead Captureproduct · 1
Wordfencevendor · 1
Rymera Web Covendor · 1
WordPressproduct · 1

Entities are extracted by the model from each article. First seen Sep 16, 2026, last mentioned Sep 16, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.