Search: “plugin security”

222 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 605 Malware 465 Exploit / PoC 273 Ransomware 182 Threat actor 109 Data breach 103 Phishing & fraud 56 Policy & legal 49 Industry 44 AI safety & security 30 AI tools & infra 29 Tools 24 Research 11 Advisory 8

SeverityAll critical 795 high 622 medium 407 low 112 info 70

Crooks spreads backdoor devised as a security WordPress Plugin

Security AffairsOct 1, 13:10 UTC · Oct 1, 2017Malware

42

New WordPress Malware Masquerades as Plugin

Infosecurity MagazineApr 29, 16:45 UTC · Apr 29, 2025Malware

42

Rootkit Banker – now also to 64

Kaspersky SecurelistMay 20, 16:58 UTC · May 20, 2011Malware

42

A School for Cybercrime: How to Become a Black Hat

Kaspersky SecurelistJan 16, 20:46 UTC · Jan 16, 2012Malware

42

Kimsuky Hackers Spotted Using 3 New Android Malware to Target South Koreans

The Hacker NewsOct 26, 15:50 UTC · Oct 26, 2022Malware

42

Notepad++ Plugins Allow Attackers to Infiltrate Systems, Achieve Persistence

Infosecurity MagazineSep 15, 17:28 UTC · Sep 15, 2022Malware

42

Hackers Deploy Stealth Backdoor in WordPress Mu

The Hacker NewsJul 24, 05:11 UTC · Jul 24, 2025Malware

42

A backdoor in the popular Captcha Plugin poses serious risks to 300K WordPress sites

Security AffairsDec 20, 09:32 UTC · Dec 20, 2017Malware

42

Abandoned Eval PHP WordPress plugin abused to backdoor sites

Security AffairsApr 22, 21:26 UTC · Apr 22, 2023Malware

42

Malware Campaign Exploits Popup Builder WordPress Plugin to Infect 3,900+ Sites

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2024Malware CVE-2023-6000 CVE-2024-2123 CVE-2024-1071+1 CVEs

47

Unveiling the Balada injector: a malware epidemic in WordPress

Security AffairsJun 14, 11:13 UTC · Jun 14, 2023Malware

42

Hackers Planted Secret Backdoor in Dozens of WordPress Plugins and Themes

The Hacker NewsJan 22, 07:39 UTC · Jan 22, 2022Malware CVE-2021-24867 CVE-2022-0218

47

Researchers Find Backdoor in School Management Plugin for WordPress

The Hacker NewsMay 21, 05:11 UTC · May 21, 2022Malware in the wildCVE-2022-1609

60

Lazarus APT unveils fileless RAT designed to evade detection

Security AffairsMay 26, 08:33 UTC · May 26, 2026Malware

42

WordPress Security Alert: New Linux Malware Exploiting Over Two Dozen CMS Flaws

The Hacker NewsJan 17, 12:32 UTC · Jan 17, 2023Malware CVE-2016-10972 CVE-2019-17232 CVE-2019-17233

47

Hackers Exploit Outdated WordPress Plugin to Backdoor Thousands of WordPress Sites

The Hacker NewsApr 28, 03:19 UTC · Apr 28, 2023Malware

42

Researchers Uncover Malware Posing as WordPress Caching Plugin

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2023Malware

42

Backdoor slipped into multiple WordPress plugins in ongoing supply

Ars Technica · SecurityJun 24, 21:00 UTC · Jun 24, 2024Malware

42

ClickFix Campaigns Spread MacSync macOS Infostealer via Fake AI Tool Installers

The Hacker NewsMar 31, 11:33 UTC · Mar 31, 2026Malware

42

Gootkit delivery platform Gootloader used to deliver additional payloads

Security AffairsMar 1, 22:15 UTC · Mar 1, 2021Malware

42

Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2026Malware CVE-2026-10795

47

Plurox: Modular backdoor

Kaspersky SecurelistJun 18, 10:00 UTC · Jun 18, 2019Malware

42

Backdoored Display Widgets Plugin potentially affects 200,000 WordPress installs abusing them to spam content

Security AffairsOct 3, 13:55 UTC · Oct 3, 2017Malware

42

Advanced ValleyRAT Campaign Hits Windows Users in China

Infosecurity MagazineAug 15, 16:00 UTC · Aug 15, 2024Malware

42

A renewed espionage campaign targets South Asia with iOS spyware LightSpy

Security AffairsApr 16, 13:47 UTC · Apr 16, 2024Malware

42

Researchers Claim CIA Was Behind 11-Year

The Hacker NewsMar 3, 20:02 UTC · Mar 3, 2020Malware

42

Malware Manipulates AI Detection in Latest npm Package Breach

Infosecurity MagazineDec 1, 15:00 UTC · Dec 1, 2025Malware

42

Backdoored Smart Slider 3 Pro Update Distributed via Compromised Nextend Servers

The Hacker NewsApr 10, 06:28 UTC · Apr 10, 2026Malware

42

Eagerbee backdoor targets govt entities and ISPs in Middle East

Security AffairsJan 7, 06:23 UTC · Jan 7, 2025Malware CVE-2021-26855

47

Fake UpdraftPlus WordPress Plugins used to backdoor sites

Security AffairsOct 20, 19:28 UTC · Oct 20, 2019Malware

42

DiceyF deploys GamePlayerFramework in online casino development studio

Kaspersky SecurelistOct 18, 17:33 UTC · Oct 18, 2022Malware

42

Gootkit RAT Using SEO to Distribute Malware Through Compromised Sites

The Hacker NewsMar 2, 08:52 UTC · Mar 2, 2021Malware

42

Fake SEO plugin backdoors WordPress installations

Help Net SecurityAug 6, 13:01 UTC · Aug 6, 2019Malware

42

Supply Chain Attack Targets Key Ethereum Development Tools

Infosecurity MagazineJan 6, 16:30 UTC · Jan 6, 2025Malware

42

Hidden Backdoor Found In WordPress Captcha Plugin Affects Over 300,000 Sites

The Hacker NewsDec 20, 09:56 UTC · Dec 20, 2017Malware

42

ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack

The Hacker NewsJul 7, 11:22 UTC · Jul 7, 2026Malware CVE-2026-10735 CVE-2026-49777

47

Polyfill[.]io Attack Impacts Over 380,000 Hosts, Including Major Companies

The Hacker NewsJul 9, 04:22 UTC · Jul 9, 2024Malware

42

Monthly Malware Statistics, June 2011

Kaspersky SecurelistJul 6, 11:22 UTC · Jul 6, 2011Malware CVE-2010-4452 CVE-2010-0886 CVE-2010-1885

47

ESET unveils new cloud and XDR solutions to improve cybersecurity for MSPs

Help Net SecurityOct 3, 00:00 UTC · Oct 3, 2022Malware

42

Malicious PyPI Packages Exploit Instagram and TikTok APIs to Validate User Accounts

The Hacker NewsMay 20, 05:49 UTC · May 20, 2025Malware1

42