Balada Injector Malware Hits More Than 17,000 WordPress Sites – Source: heimdalsecurity.com

Source: heimdalsecurity.com – Author: Livia Gyongyoși A new Balada Injector campaign used known WordPress plugin and theme vulnerabilities to hack over 17,000 websites during September 2023. Threat actors exploited the CVE-2023-3169 cross-site scripting (XSS) vulnerability in tagDiv Composer. Composer is a tool for the tagDiv’s Newspaper and Newsmag WordPress themes. Both themes are paid for […]
La entrada Balada Injector Malware Hits More Than 17,000 WordPress Sites – Source: heimdalsecurity.com se publicó primero en CISO2CISO.COM & CYBER SECURITY GROUP.