WooCommerce Wholesale Lead Capture hacked to install PHP backdoors

A critical flaw in the WooCommerce Wholesale Lead Capture plugin is being exploited.

Published 2h1 sourceNotable

≈ 16sSpeed

The fact

Unauthenticated attackers upload arbitrary files, including PHP shells.

Over 6,000 WordPress sites are affected by this vulnerability.

Click the link to read an article on the topic:

Explore this topic

Auto-synthesis from 1 media source · identified on September 16, 2026