/
vendors:WordPress × criticity:medium × limpar

Resultados

3 casos · pág. 1/1

f5.com · exploit público medium

F5 Labs June 2026: Honeynet attacks up 55.5%; LiteSpeed Cache CVE-2024-44000 debug.log scanning surges alongside Exchange and PHP exploits

F5 Labs honeynet telemetry shows overall hostile activity rising 55.5% month over month in June 2026, a return to the levels of the earlier-year spike. Highlighted is CVE-2024-44000, an unauthenticated account takeover flaw (CVSS 9.8, CWE-522) in the LiteSpeed Cache WordPress plugin, which rose by 1,128 to 2,603 attacks (8). Scanning is i…

f5.com · exploit público medium

Azure-hosted cluster scans for planted WordPress webshells tied to CVE-2018-14028, per F5 Honeynet March 2026 data

F5 Labs reports a scanning campaign observed on its Honeynet in March 2026. It recorded 1,897 session-grouped attempts (2,821 raw events) tied to CVE-2018-14028, a WordPress 4.9.7 unrestricted file upload flaw, and the CVE entered the monthly top 10 after being absent in February. Instead of exploiting the upload flaw, the operator probes…

blog.checkpoint.com · medium

Scam campaign seeds fake airline and travel support numbers via PDFs on trusted sites, search results and Meta AI summaries

Check Point Exposure Management researchers identified a campaign that mass-produces fraudulent customer support PDFs and posts impersonating more than 20 travel brands, including airlines, travel agencies and transportation companies. The documents are uploaded to trusted university, government and commercial websites through public uplo…