Popular WooCommerce WordPress Plugin Patches Critical VulnerabilityThe Hacker News·Nov 7, 09:01 UTC · Nov 7, 2018Vulnerability55
Dlaw in WooCommerce Plugin could be exploited to take over estoresSecurity Affairs·Nov 7, 19:25 UTC · Nov 7, 2018Exploit / PoC60
A e-skimmer found on WordPress site using the WooCommerce pluginSecurity Affairs·Apr 12, 10:43 UTC · Apr 12, 2020Data breach60
A large-scale phishing campaign targets WordPress WooCommerce usersSecurity Affairs·Apr 28, 11:43 UTC · Apr 28, 2025Threat actorCVE-2023-4512460
Critical flaw in WooCommerce Payments plugin allows site takeoverSecurity Affairs·Mar 24, 14:45 UTC · Mar 24, 2023Exploit / PoC in the wild60
Experts release PoC exploit for flaw in WordPress WooCommerceSecurity Affairs·Apr 27, 11:02 UTC · Apr 27, 2019Exploit / PoC60
WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site BackdoorsThe Hacker News·Apr 28, 08:06 UTC · Apr 28, 2025Vulnerability55
Hacking campaign targets sites using WordPress WooCommerce Payments PluginSecurity Affairs·Jul 18, 10:48 UTC · Jul 18, 2023Threat actorCVE-2023-2812160
Critical Unpatched Flaw Disclosed in WordPress WooCommerce ExtensionThe Hacker News·Apr 26, 11:37 UTC · Apr 26, 2019Vulnerability55
Critical flaw found in the WooCommerce Stripe Gateway PluginSecurity Affairs·Jun 14, 13:32 UTC · Jun 14, 2023VulnerabilityCVE-2023-3400060
WooCommerce Patches Critical Plugin Flaw Affecting Half a Million SitesInfosecurity Magazine·Mar 24, 17:00 UTC · Mar 24, 2023Vulnerability in the wild60
WooCommerce Bug Exploited in Targeted WordPress AttacksInfosecurity Magazine·Jul 18, 10:30 UTC · Jul 18, 2023VulnerabilityCVE-2023-2812160
Cybercriminals Exploiting WooCommerce Payments Plugin Flaw to Hijack WebsitesThe Hacker News·Jul 19, 03:25 UTC · Jul 19, 2023Exploit / PoC in the wildCVE-2023-28121CVE-2023-29298CVE-2023-3820360
Critical WooCommerce Payments Plugin Flaw Patched for 500,000+ WordPress SitesThe Hacker News·Mar 24, 07:51 UTC · Mar 24, 2023Vulnerability in the wild60
Funnel Builder Flaw Exploited to Enable WooCommerce Checkout SkimmingThe Hacker News·Jun 1, 11:32 UTC · Jun 1, 2026Exploit / PoC in the wild60
Critical Flaw Found in WordPress Plugin for WooCommerce Used by 30,000 WebsitesThe Hacker News·Jun 22, 10:17 UTC · Jun 22, 2023VulnerabilityCVE-2023-2986CVE-2023-283460
Critical Security Vulnerability Discovered in WooCommerce Stripe Gateway PluginThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2023VulnerabilityCVE-2023-3400060
Critical FunnelKit vulnerability threatens 40,000+ WooCommerce checkoutsSansec (Magento / e-commerce security)·May 26, 14:45 UTC · May 26, 2026Vulnerability in the wildCVE-2026-4710060
Security Flaws Found in Popular WooCommerce PluginInfosecurity Magazine·Jun 7, 11:00 UTC · Jun 7, 2024Data breachCVE-2024-33549CVE-2024-33544CVE-2024-3354660
Network Security Trends: AugustPalo Alto Unit 42·Jun 6, 00:57 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2021-40438CVE-2021-34473CVE-2021-38647+9 CVEs60
How Activity Logs Help WordPress Admins Better Manage Website SecurityThe Hacker News·Aug 20, 13:05 UTC · Aug 20, 2019Policy & legal55
Experts warn of attacks exploiting WordPress gift card pluginSecurity Affairs·Dec 25, 19:42 UTC · Dec 25, 2022VulnerabilityCVE-2022-4535960
Attackers exploit Funnel Builder bug to inject e-skimmers into eSecurity Affairs·May 17, 12:25 UTC · May 17, 2026Vulnerability in the wild60
Malware Persistence via Telegram and GitHubSansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026Malware55
Over 100,000 WordPress Sites at Risk from Critical CVSS 10.0 Vulnerability in Wishlist PluginThe Hacker News·May 29, 08:52 UTC · May 29, 2025VulnerabilityCVE-2025-4757760
⚡ Weekly Recap: APT Campaigns, Browser Hijacks, AI Malware, Cloud Breaches and Critical CVEsThe Hacker News·May 26, 13:00 UTC · May 26, 2025MalwareCVE-2025-4427CVE-2025-4428CVE-2025-34025+7 CVEs60
Hackers Exploiting WordPress Elementor Pro Vulnerability: Millions of Sites at Risk!The Hacker News·Apr 1, 08:10 UTC · Apr 1, 2023Vulnerability55
Hackers are actively exploiting a flaw in Elementor Pro WordPress pluginSecurity Affairs·Mar 31, 20:36 UTC · Mar 31, 2023Exploit / PoC in the wild60
Crooks are attempting to take over tens of thousands of WordPress sitesSecurity Affairs·Feb 29, 16:15 UTC · Feb 29, 2020Exploit / PoC in the wild60
⚡ Weekly Recap: Chrome 0-Day, Data Wipers, Misused Tools and ZeroThe Hacker News·Jul 25, 08:27 UTC · Jul 25, 2026Malware in the wildCVE-2025-20286CVE-2025-49113CVE-2025-5419+8 CVEs60
⚡ Weekly Recap: Critical SAP Exploit, AI-Powered Phishing, Major Breaches, New CVEs & MoreThe Hacker News·May 6, 07:05 UTC · May 6, 2025Phishing & fraudCVE-2025-31324CVE-2024-58136CVE-2025-32432+16 CVEs60
⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and MoreThe Hacker News·Jun 23, 03:40 UTC · Jun 23, 2026Malware in the wildCVE-2026-24858CVE-2025-59718CVE-2025-59719+1 CVEs60
GorgonAgora: 4,800+ fake storefronts skim cards across hundreds of impersonated brandsSansec (Magento / e-commerce security)·Jun 3, 19:37 UTC · Jun 3, 2026Vulnerability55
Magento Security Release APSB25Sansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026VulnerabilityCVE-2023-3821860
PCI-SSC/RHISAC quote Sansec: 20% stores reinfectedSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Policy & legal55
⚡ Weekly Recap: Fortinet Exploits, RedLine Clipjack, NTLM Crack, Copilot Attack & MoreThe Hacker News·Jan 20, 07:01 UTC · Jan 20, 2026Exploit / PoC in the wildCVE-2025-6415560
⚡ THN Weekly Recap: Google Secrets Stolen, Windows Hack, New Crypto Scams and MoreThe Hacker News·Jun 10, 09:34 UTC · Jun 10, 2025Phishing & fraudCVE-2025-1094CVE-2025-0108CVE-2025-23359+31 CVEs160
⚡ Weekly Recap: APT Intrusions, AI Malware, ZeroThe Hacker News·Jun 3, 04:04 UTC · Jun 3, 2025Malware in the wildCVE-2025-3935CVE-2025-47577CVE-2025-2760+14 CVEs60
⚡ THN Weekly Recap: Alerts on Zero-Day Exploits, AI Breaches, and Crypto HeistsThe Hacker News·May 6, 07:05 UTC · May 6, 2025Exploit / PoCCVE-2024-53104CVE-2024-53197CVE-2024-50302+25 CVEs160
⚡ Weekly Recap: VPN Exploits, Oracle's Silent Breach, ClickFix Surge and MoreThe Hacker News·May 6, 07:05 UTC · May 6, 2025Data breachCVE-2025-22457CVE-2025-24061CVE-2025-2407+15 CVEs60