Exploit / PoCcriticalExploited in the wild

Cybercriminals Exploiting WooCommerce Payments Plugin Flaw to Hijack Websites

The Hacker Newsby @TheHackersNewsJul 19, 2023 · 03:25 UTC (Jul 19, 2023)2 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2023-28121 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-28121 CVE-2023-29298 CVE-2023-38203

Tags: cve-2023-28121 cve-2023-29298 cve-2023-38203 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-28121	An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to send requests on behalf of an elevated…	9.8	87%		Apr 12, 2023
CVE-2023-29298	Unauthenticated Access Control Bypass in Adobe ColdFusion (Actively Exploited)	7.5	100%	KEV	Jul 12, 2023 KEV Jul 20, 2023
CVE-2023-38203	Unauthenticated Deserialization RCE in Adobe ColdFusion (Actively Exploited)	9.8	97%	KEVRansomware	Jul 20, 2023 KEV Jan 8, 2024

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Jul 18, 2023 Server Security / Vulnerability Threat actors are actively exploiting a recently disclosed critical security flaw in the WooCommerce Payments WordPress plugin as part of a massive targeted campaign. The flaw, tracked as CVE-2023-28121 (CVSS score: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.