Cybercriminals Exploiting WooCommerce Payments Plugin Flaw to Hijack Websites <!-- wp:html --><p>Threat actors are actively exploiting a recently disclosed critical security flaw in the WooCommerce Payments WordPress plugin as part of a massive targeted campaign.<br /> The flaw, tracked as CVE-2023-28121 (CVSS score: 9.8), is a case of authentication bypass that enables unauthenticated attackers to impersonate arbitrary users and perform some actions as the impersonated user, including an <a href="http://thehackernews.com/2023/07/cybercriminals-exploiting-woocommerce.html" target="_blank" class="feedzy-rss-link-icon" rel="noopener">Read More</a> </p> <p>The Hacker News | #1 Trusted Cybersecurity News Site </p><!-- /wp:html -->
Threat actors are actively exploiting a recently disclosed critical security flaw in the WooCommerce Payments WordPress plugin as part of a massive targeted campaign.
The flaw, tracked as CVE-2023-28121 (CVSS score: 9.8), is a case of authentication bypass that enables unauthenticated attackers to impersonate arbitrary users and perform some actions as the impersonated user, including an Read More
The Hacker News | #1 Trusted Cybersecurity News Site
