#Wordpress-Attacke
LightNews LightNews
theunicornxxl.bsky.social
GravityForms: WordPress-Plug-in in Supply-Chain-Attacke infiziert | heise online

heise.de/-10486326
GravityForms: WordPress-Plug-in in Supply-Chain-Attacke infiziert
IT-Forscher haben auf der Webseite des millionenfach genutzten WordPress-Plug-ins GravityForms eine infizierte Version entdeckt.
heise.de
July 16, 2025 at 10:08 PM
heiseonline.flipboard.com.ap.brid.gy
GravityForms: WordPress-Plug-in in Supply-Chain-Attacke infiziert
https://www.heise.de/en/news/GravityForms-WordPress-Plug-in-in-Supply-Chain-Attacke-infiziert-10486488.html?utm_source=flipboard&utm_medium=activitypub

Posted into heise online in English @heise-online-in-english-heiseonline
GravityForms: WordPress-Plug-in in Supply-Chain-Attacke infiziert
IT researchers have discovered an infected version of the WordPress plug-in GravityForms, which is used millions of times.
www.heise.de
July 14, 2025 at 8:46 PM
aixzellent.bsky.social
GravityForms: WordPress-Plug-in in Supply-Chain-Attacke infiziert | Security www.heise.de/news/Gravity...
GravityForms: WordPress-Plug-in in Supply-Chain-Attacke infiziert
IT-Forscher haben auf der Webseite des millionenfach genutzten WordPress-Plug-ins GravityForms eine infizierte Version entdeckt.
www.heise.de
July 14, 2025 at 5:46 PM
heiseonline.flipboard.com.ap.brid.gy
GravityForms: WordPress-Plug-in in Supply-Chain-Attacke infiziert
https://www.heise.de/news/GravityForms-WordPress-Plug-in-in-Supply-Chain-Attacke-infiziert-10486326.html?utm_source=flipboard&utm_medium=activitypub

Gepostet in Nachrichten @nachrichten-heiseonline
GravityForms: WordPress-Plug-in in Supply-Chain-Attacke infiziert
IT-Forscher haben auf der Webseite des millionenfach genutzten WordPress-Plug-ins GravityForms eine infizierte Version entdeckt.
www.heise.de
July 14, 2025 at 12:57 PM
hacker.at.thenote.app
Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access

Over 1,000 websites powered by WordPress have been infected with a third-party JavaScript code that injects four separate backdoors.
"Creating four backdoors facilitates the attacke…

#hackernews #news
Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access
Over 1,000 websites powered by WordPress have been infected with a third-party JavaScript code that injects four separate backdoors. "Creating four backdoors facilitates the attackers having multiple points of re-entry should one be detected and removed," c/side researcher Himanshu Anand said in a Wednesday analysis. The malicious JavaScript code has been found to be served via cdn.csyndication[
thehackernews.com
March 7, 2025 at 12:17 PM
cve.skyfleet.blue
CVE-2024-12436 - WordPress Customer Area CSRF Vulnerability
CVE ID : CVE-2024-12436

Published : Jan. 27, 2025, 6:15 a.m. | 29 minutes ago

Description : The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF checks in some places, which could allow attacke...
CVE-2024-12436 - WordPress Customer Area CSRF Vulnerability
The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
cvefeed.io
January 27, 2025 at 6:49 AM
hnnng.de
#Wordpress-Attacke: Schön dass @1und1 empfiehlt, .htaccess für /wp-admin/ anzulegen, aber FTP-, SSH-Service und Web-ControlCenter down sind.
January 15, 2025 at 2:42 PM