data_types_exposed:credentials × cves:CVE-2026-111862 × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · há 1d · 4 fontes · 4 atualizações critical

Rank Math PRO 3.0.123 trojanized in supply chain attack: self-restoring WordPress backdoor (CVE-2026-111862)

The paid WordPress SEO plugin Rank Math PRO was hit by a supply chain attack. Copies of version 3.0.123 downloaded from the vendor's site or delivered as updates between October 15, 2026 20:02 UTC and October 16, 2026 07:12 UTC contained malware (securityweek.com, thehackernews.com, bleepingcomputer.com). Any site that installed and activ…

CVE-2026-111862 technology

thehackernews.com · há 13h · 4 fontes · 4 atualizações critical

Attackers abuse UpdraftCentral keys stolen in TeamUpdraft breach to backdoor WordPress sites via malicious plugins

Unknown threat actors breached the TeamUpdraft website on 17-18 October 2026 and likely accessed its customer database, which holds connection keys for UpdraftCentral, UpdraftVault and UpdraftClone. Patchstack observed an attacker holding valid UpdraftCentral dashboard keys issuing signed commands to install backdoor plugins on connected …

CVE-2026-10795 CVE-2026-111862 CVE-2026-109618 technology