Attackers are actively exploiting a recently patched flaw in a plugin used by thousands.

The U.S government National Vulnerability Database (NVD) published warnings of vulnerabilities in five WooCommerce WordPress plugins affecting over 135,000 installations. Many of the vulnerabilities ...

Critical WooCommerce plugin flaw exploited to deploy PHP webshells on WordPress sites. Learn how to protect your website now.

Hackers are conducting widespread exploitation of a critical WooCommerce Payments plugin to gain the privileges of any users, including administrators, on vulnerable WordPress installation.

Attackers are exploiting CVE-2026-27540 in WooCommerce Wholesale Lead Capture to upload PHP web shells and gain remote code execution.

The WooCommerce plugin launched in 2011, enabling users to turn their WordPress sites into ecommerce storefronts. Today, approximately one-fourth of all online stores use WooCommerce, which is now ...

In the world of ecommerce platforms, plugins, and shopping carts, there are a lot of technology options. WooCommerce for WordPress leads the way in terms of market share. All of the various ecommerce ...

Defiant warned of active exploitation of WooCommerce Wholesale Lead Capture Plugin flaw (CVE‑2026‑27540) Critical unauthenticated file‑upload bug lets attackers deploy PHP webshells for site takeover ...