Popular WooCommerce WordPress Plugin Patches Critical VulnerabilityThe Hacker News·Nov 7, 09:01 UTC · Nov 7, 2018Vulnerability55
High-Severity flaw in 3 WordPress plugins impacts 84,000 websitesSecurity Affairs·Jan 17, 13:21 UTC · Jan 17, 2022VulnerabilityCVE-2022-021547
Hackers are attempting to exploit multiple vulnerabilities in the Discount Rules for WooCommerce WordPress plugin, which has 30,000+ installations.Security Affairs·Aug 22, 08:15 UTC · Aug 22, 2020Vulnerability42
Discount Rules for WooCommerce WordPress plugin gets patch againSecurity Affairs·Sep 21, 20:18 UTC · Sep 21, 2020Vulnerability42
WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site BackdoorsThe Hacker News·Apr 28, 08:06 UTC · Apr 28, 2025Vulnerability55
Critical Unpatched Flaw Disclosed in WordPress WooCommerce ExtensionThe Hacker News·Apr 26, 11:37 UTC · Apr 26, 2019Vulnerability55
Critical flaw found in the WooCommerce Stripe Gateway PluginSecurity Affairs·Jun 14, 13:32 UTC · Jun 14, 2023VulnerabilityCVE-2023-3400060
WooCommerce Patches Critical Plugin Flaw Affecting Half a Million SitesInfosecurity Magazine·Mar 24, 17:00 UTC · Mar 24, 2023Vulnerability in the wild60
WooCommerce Bug Exploited in Targeted WordPress AttacksInfosecurity Magazine·Jul 18, 10:30 UTC · Jul 18, 2023VulnerabilityCVE-2023-2812160
Critical WooCommerce Payments Plugin Flaw Patched for 500,000+ WordPress SitesThe Hacker News·Mar 24, 07:51 UTC · Mar 24, 2023Vulnerability in the wild60
Critical Flaw Found in WordPress Plugin for WooCommerce Used by 30,000 WebsitesThe Hacker News·Jun 22, 10:17 UTC · Jun 22, 2023VulnerabilityCVE-2023-2986CVE-2023-283460
Critical Security Vulnerability Discovered in WooCommerce Stripe Gateway PluginThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2023VulnerabilityCVE-2023-3400060
High-Severity Vulnerability in 3 WordPress Plugins Affected 84,000 WebsitesThe Hacker News·Jan 18, 10:03 UTC · Jan 18, 2022VulnerabilityCVE-2022-021547
Critical FunnelKit vulnerability threatens 40,000+ WooCommerce checkoutsSansec (Magento / e-commerce security)·May 26, 14:45 UTC · May 26, 2026Vulnerability in the wildCVE-2026-4710060
Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer AttackThe Hacker News·Jun 7, 03:59 UTC · Jun 7, 2023Vulnerability30
Experts warn of attacks exploiting WordPress gift card pluginSecurity Affairs·Dec 25, 19:42 UTC · Dec 25, 2022VulnerabilityCVE-2022-4535960
Attackers exploit Funnel Builder bug to inject e-skimmers into eSecurity Affairs·May 17, 12:25 UTC · May 17, 2026Vulnerability in the wild60
Over 100,000 WordPress Sites at Risk from Critical CVSS 10.0 Vulnerability in Wishlist PluginThe Hacker News·May 29, 08:52 UTC · May 29, 2025VulnerabilityCVE-2025-4757760
WordPress Plugin abused to install e-skimmers in eSecurity Affairs·May 28, 08:43 UTC · May 28, 2024Vulnerability30
Hackers Exploiting WordPress Elementor Pro Vulnerability: Millions of Sites at Risk!The Hacker News·Apr 1, 08:10 UTC · Apr 1, 2023Vulnerability55
ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New StoriesThe Hacker News·Jun 12, 05:36 UTC · Jun 12, 2026Vulnerability142
BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress AdminsThe Hacker News·Aug 11, 05:48 UTC · Aug 11, 2026VulnerabilityCVE-2026-18072CVE-2026-6463847
GorgonAgora: 4,800+ fake storefronts skim cards across hundreds of impersonated brandsSansec (Magento / e-commerce security)·Jun 3, 19:37 UTC · Jun 3, 2026Vulnerability55
Avada Builder Flaws Expose One Million WordPress SitesInfosecurity Magazine·May 13, 14:00 UTC · May 13, 2026VulnerabilityCVE-2026-4782CVE-2026-479835
Magento Security Release APSB25Sansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026VulnerabilityCVE-2023-3821860
Fancy Product Designer Plugin Flaws Expose WordPress SitesInfosecurity Magazine·Jan 9, 17:15 UTC · Jan 9, 2025VulnerabilityCVE-2024-51919CVE-2024-5181860
LiteSpeed Cache Plugin Vulnerability Poses Admin Access RiskInfosecurity Magazine·Oct 30, 17:15 UTC · Oct 30, 2024VulnerabilityCVE-2024-5055060
WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS AttacksThe Hacker News·Oct 7, 06:13 UTC · Oct 7, 2024VulnerabilityCVE-2024-47374CVE-2024-44000CVE-2024-43917+2 CVEs60
WordPress LiteSpeed Cache plugin flaw could allow site takeoverSecurity Affairs·Oct 5, 13:49 UTC · Oct 5, 2024VulnerabilityCVE-2024-47374CVE-2024-4400047
Critical WPML Plugin Flaw Exposes WordPress Sites to Remote Code ExecutionThe Hacker News·Aug 31, 15:15 UTC · Aug 31, 2024VulnerabilityCVE-2024-638660
GiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at RiskThe Hacker News·Aug 21, 04:35 UTC · Aug 21, 2024VulnerabilityCVE-2024-5932CVE-2024-6500CVE-2024-7094+4 CVEs60
WordPress Plugins at Risk From Polyfill Library CompromiseInfosecurity Magazine·Jul 3, 17:15 UTC · Jul 3, 2024Vulnerability42
Vulnerability Exposed in WordPress Plugin User Submitted PostsInfosecurity Magazine·Oct 12, 17:00 UTC · Oct 12, 2023VulnerabilityCVE-2023-4560335
Magecart Hackers Hide in 404 Error PagesInfosecurity Magazine·Oct 10, 09:30 UTC · Oct 10, 2023Vulnerability42
Flaw Exposes WP Migration Plugin to HacksInfosecurity Magazine·Aug 30, 17:30 UTC · Aug 30, 2023Vulnerability42
Cybersecurity Study Reveals Web App Vulnerability CrisisInfosecurity Magazine·Aug 18, 17:00 UTC · Aug 18, 2023Vulnerability55
Multiple Flaws Found in the Avada WordPress Theme and PluginInfosecurity Magazine·Aug 11, 17:30 UTC · Aug 11, 2023VulnerabilityCVE-2023-39309CVE-2023-39306CVE-2023-39307+2 CVEs47
High Severity Vulnerabilities Discovered in Ninja Forms PluginInfosecurity Magazine·Jul 27, 17:00 UTC · Jul 27, 2023VulnerabilityCVE-2023-37979CVE-2023-38393CVE-2023-3838647
What Developers Need to Fight the Battle Against Common VulnerabilitiesThe Hacker News·Dec 1, 11:17 UTC · Dec 1, 2022Vulnerability55
Secure your CMS-based websites against pervasive attacksHelp Net Security·Aug 23, 07:16 UTC · Aug 23, 2022Vulnerability30