/
vendors:Patchstack × victim_sectors:technology × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · · 3 fontes · 3 atualizações critical

Attackers abuse stolen UpdraftCentral keys from TeamUpdraft breach to install malicious plugins on WordPress sites

Attackers used UpdraftCentral connection keys exposed in an October 17-18, 2026 breach of the TeamUpdraft website to send validly signed remote-management commands to WordPress sites running UpdraftPlus. The commands installed malicious plugins that give unauthorized access, and Wordfence also saw attempts to delete existing plugins. Team…

CVE-2026-10795 technology
thehackernews.com · critical

Rank Math PRO update channel compromised to deliver self-restoring backdoor in version 3.0.123 (CVE-2026-111862)

Rank Math disclosed that copies of Rank Math PRO, the paid WordPress SEO plugin, downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16, 2026 contained malware. Any site that installed and activated an affected copy should be treated as compromised. The malware can recreate its hid…

CVE-2026-111862 technology