ALERT: Critical Layer WordPress Vulnerability (XSS2Shell)
%22%3E%3Cstop offset=%220%22 stop-color=%22hsl(14 44%25 95%25)%22/%3E%3Cstop offset=%221%22 stop-color=%22hsl(36 40%25 86%25)%22/%3E%3C/linearGradient%3E%3C/defs%3E%3Crect width=%22160%22 height=%2290%22 fill=%22url(%23g)%22/%3E%3Cg stroke=%22hsl(14 42%25 34%25)%22 fill=%22hsl(14 42%25 34%25)%22 opacity=%22.13%22%3E%3Cg stroke=%22none%22%3E%3Ccircle cx=%228%22 cy=%228%22 r=%223%22/%3E%3Ccircle cx=%228%22 cy=%2230%22 r=%223%22/%3E%3Ccircle cx=%228%22 cy=%2252%22 r=%223%22/%3E%3Ccircle cx=%228%22 cy=%2274%22 r=%223%22/%3E%3Ccircle cx=%2230%22 cy=%228%22 r=%223%22/%3E%3Ccircle cx=%2230%22 cy=%2230%22 r=%223%22/%3E%3Ccircle cx=%2230%22 cy=%2252%22 r=%223%22/%3E%3Ccircle cx=%2230%22 cy=%2274%22 r=%223%22/%3E%3Ccircle cx=%2252%22 cy=%228%22 r=%223%22/%3E%3Ccircle cx=%2252%22 cy=%2230%22 r=%223%22/%3E%3Ccircle cx=%2252%22 cy=%2252%22 r=%223%22/%3E%3Ccircle cx=%2252%22 cy=%2274%22 r=%223%22/%3E%3Ccircle cx=%2274%22 cy=%228%22 r=%223%22/%3E%3Ccircle cx=%2274%22 cy=%2230%22 r=%223%22/%3E%3Ccircle cx=%2274%22 cy=%2252%22 r=%223%22/%3E%3Ccircle cx=%2274%22 cy=%2274%22 r=%223%22/%3E%3Ccircle cx=%2296%22 cy=%228%22 r=%223%22/%3E%3Ccircle cx=%2296%22 cy=%2230%22 r=%223%22/%3E%3Ccircle cx=%2296%22 cy=%2252%22 r=%223%22/%3E%3Ccircle cx=%2296%22 cy=%2274%22 r=%223%22/%3E%3Ccircle cx=%22118%22 cy=%228%22 r=%223%22/%3E%3Ccircle cx=%22118%22 cy=%2230%22 r=%223%22/%3E%3Ccircle cx=%22118%22 cy=%2252%22 r=%223%22/%3E%3Ccircle cx=%22118%22 cy=%2274%22 r=%223%22/%3E%3Ccircle cx=%22140%22 cy=%228%22 r=%223%22/%3E%3Ccircle cx=%22140%22 cy=%2230%22 r=%223%22/%3E%3Ccircle cx=%22140%22 cy=%2252%22 r=%223%22/%3E%3Ccircle cx=%22140%22 cy=%2274%22 r=%223%22/%3E%3C/g%3E%3C/g%3E%3Cg fill=%22none%22 stroke=%22hsl(14 42%25 34%25)%22 stroke-opacity=%22.44%22 stroke-width=%222.7%22 stroke-linecap=%22round%22 stroke-linejoin=%22round%22 transform=%22translate(34 21) scale(0.89) rotate(-12 24 24)%22%3E%3Cpath d=%22M24 2 44 9v16c0 12-9 19-20 23C13 44 4 37 4 25V9Z%22/%3E%3Cpath d=%22M14 24l7 7 13-14%22/%3E%3C/g%3E%3C/svg%3E)
illustration
Most WordPress sites are compromised through something ordinary: an unpatched plugin, an abandoned theme, an account without two-factor. If you would rather updates and backups simply happened, CrockyHost hosting does them for you.
Keep reading
- New Evooo1Bot Linux botnet turns routers into traffic relay nodes BleepingComputer
- Hackers arrested over €30M bank fraud exploiting service provider flaw BleepingComputer
- Hackers exploit macOS Screen Sharing flaw to deploy Monero miner BleepingComputer
- The Modern Attack Chain: Rethinking Google Workspace Security in the Age of AI BleepingComputer
