Flaw in WordPress plugin allowed unauthorized admin access, backdoorsCyberScoop·Nov 12, 16:01 UTC · Nov 12, 2018Malware in the wild60
Hidden Backdoor Found In WordPress Captcha Plugin Affects Over 300,000 SitesThe Hacker News·Dec 20, 09:56 UTC · Dec 20, 2017Malware42
A backdoor in the popular Captcha Plugin poses serious risks to 300K WordPress sitesSecurity Affairs·Dec 20, 09:32 UTC · Dec 20, 2017Malware42
Backdoored Display Widgets Plugin potentially affects 200,000 WordPress installs abusing them to spam contentSecurity Affairs·Oct 3, 13:55 UTC · Oct 3, 2017Malware42
WordPress botnet composed of +20k installs targets other sitesSecurity Affairs·Dec 9, 17:00 UTC · Dec 9, 2018Malware30
Magento Sites Targeted with Sneaky Credit Card Skimmer via Swap FilesThe Hacker News·Jul 23, 12:06 UTC · Jul 23, 2024Malware30
Trump will soon reveal the truth about the alleged Russian hackingSecurity Affairs·Jan 2, 09:23 UTC · Jan 2, 2017Malware42
ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain AttackThe Hacker News·Jul 7, 11:22 UTC · Jul 7, 2026MalwareCVE-2026-10735CVE-2026-4977747
Malware Campaign Exploits Popup Builder WordPress Plugin to Infect 3,900+ SitesThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2024MalwareCVE-2023-6000CVE-2024-2123CVE-2024-1071+1 CVEs47
ShapedPlugin Supply Chain Attack Backdoors Pro Plugin UpdatesSecurity Affairs·Jun 23, 08:23 UTC · Jun 23, 2026Malware42
Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on SitesThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026MalwareCVE-2026-1079547
Malware Campaign Uses Rogue WordPress Plugin to Skim Credit CardsInfosecurity Magazine·Jun 24, 16:45 UTC · Jun 24, 2025Malware42
New WordPress Malware Masquerades as PluginInfosecurity Magazine·Apr 29, 16:45 UTC · Apr 29, 2025Malware42
Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress SitesThe Hacker News·Jul 10, 11:30 UTC · Jul 10, 2026Malware in the wildCVE-2026-3844CVE-2021-29441CVE-2026-3300+10 CVEs60
⚡ Weekly Recap: APT Campaigns, Browser Hijacks, AI Malware, Cloud Breaches and Critical CVEsThe Hacker News·May 26, 13:00 UTC · May 26, 2025MalwareCVE-2025-4427CVE-2025-4428CVE-2025-34025+7 CVEs60
Backdoor slipped into multiple WordPress plugins in ongoing supplyArs Technica · Security·Jun 24, 21:00 UTC · Jun 24, 2024Malware42
Researchers Uncover Malware Posing as WordPress Caching PluginThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2023Malware42
Researchers Discover New Linux Malware Targeting WordPress SitesInfosecurity Magazine·Jan 3, 16:10 UTC · Jan 3, 2023Malware55
Notepad++ Plugins Allow Attackers to Infiltrate Systems, Achieve PersistenceInfosecurity Magazine·Sep 15, 17:28 UTC · Sep 15, 2022Malware42
Hackers Planted Secret Backdoor in Dozens of WordPress Plugins and ThemesThe Hacker News·Jan 22, 07:39 UTC · Jan 22, 2022MalwareCVE-2021-24867CVE-2022-021847
Attackers are exploiting vulnerable WP plugins to backdoor sitesHelp Net Security·Sep 3, 00:00 UTC · Sep 3, 2019Malware42
Wordpress sites under massive brute-force attackSecurity Affairs·Apr 14, 06:53 UTC · Apr 14, 2013Malware55