Another WordPress commercial plugin gets exploited in the wild

guest · Feb 14, 2019

Another WordPress commercial plugin gets exploited in the wild
February 14, 2019
https://www.zdnet.com/article/another-wordpress-commercial-plugin-gets-exploited-in-the-wild/

Hackers are exploiting an old vulnerability in a commercial WordPress plugin to break into websites and plant backdoors.

The vulnerability exploited in the attacks affects "WP Cost Estimation & Payment Forms Builder," a commercial WordPress plugin for building e-commerce-centric forms that has been on sale on the CodeCanyon marketplace for the last five years.

In a report published on the Wordfence official blog, Venstra and his colleagues broke down the technical details of the exploited vulnerability.
He said hackers were abusing an AJAX-related flaw in the plugin's upload functionality to save files with nonsensical extensions (such as ngfndfgsdcas.tss) on targeted sites.
Click to expand...

ronjor · Feb 16, 2019

Two WordPress Plugin Authors Issue Bug Fixes

Kacy Zurkus News Writer 15 Feb 2019
Two different WordPress plugins have caused a few headaches this week. Hackers reportedly exploited an old vulnerability found in the WordPress plugin WP Cost Estimation & Payment Forms Builder, according to Wordfence. A second and critical vulnerability was also found in the Simple Social Buttons plugin, according to WebARX.
Click to expand...

Log in or Sign up

Another WordPress commercial plugin gets exploited in the wild

guest Guest

ronjor Global Moderator

Log in or Sign up

Another WordPress commercial plugin gets exploited in the wild

guest Guest

ronjor Global Moderator

Useful Searches