WooCommerce Wholesale Lead Capture

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenSep 16, 2026
Last mentionedSep 18, 2026

Timeline

3 articles · newest first

In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw

SecurityWeek roundup: ransomware developer sentenced, critical SAP flaw CVE-2026-44756, PhantomRaven npm info-stealer, WordPress mass exploitation, and AI agent security findings.

SecurityWeekSep 18, 14:25 UTC · Sep 18, 2026IndustryExploitedCVE-2026-44756 CVE-2026-15315 CVE-2026-153164

PHP Webshell Campaign Targets WordPress Through Critical WooCommerce Plugin Bug

Wordfence blocked over 100,000 exploitation attempts against CVE-2026-27540 in WooCommerce Wholesale Lead Capture, letting attackers upload PHP webshells to WordPress sites.

Infosecurity MagazineSep 16, 15:00 UTC · Sep 16, 2026Exploit / PoCExploitedCVE-2026-275402

CVE-2026-27540 WooCommerce Flaw Exploited

Attackers are actively exploiting CVE-2026-27540, a critical arbitrary file-upload flaw in the WooCommerce Wholesale Lead Capture WordPress plugin.

SOCRadarSep 16, 11:49 UTC · Sep 16, 2026Exploit / PoCExploitedCVE-2026-275402 · 1 read

Related CVEs

by mentions

CVE-2026-275403%9.0
Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd
published Mar 19, 2026WordPress, E-commercePoC
CVE-2026-44756<1%10.0
Unauthenticated buffer overflow in SAP Kernel Extended Passport (EPP) processing
published Sep 8, 2026SAP Kernel (Extended Passport Protocol (EPP) processing library)
CVE-2026-15315<1%8.7
Authentication Bypass via Challenge Validation Flaw in TP-Link Tapo C120/C200 Cameras
published Aug 18, 2026tp-link tapo c120 firmwarePoC
CVE-2026-15316<1%7.1
Unauthenticated Input Validation DoS in TP-Link Tapo C200 v5 Configuration Service
published Aug 18, 2026TP-Link Tapo C200 firmware

Appears with

WordPressproduct · 2
TP-Linkvendor · 1
SAPvendor · 1
Wordfencevendor · 1
PhantomRaventhreat actor · 1
SecurityWeekvendor · 1
Patchstackvendor · 1
Rymera Web Covendor · 1
Nefilimmalware · 1
Black Axethreat actor · 1
Tapo C200product · 1
NISTvendor · 1
WooCommercevendor · 1
Rymera Web Coorganization · 1
Wordfenceorganization · 1
Lockergogamalware · 1

Entities are extracted by the model from each article. First seen Sep 16, 2026, last mentioned Sep 18, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.