Page 1 of 1

Fake WordPress security advisory pushes backdoor plugin

Posted: Tue Dec 05, 2023 12:36 am
by rbc
WordPress administrators are being emailed fake WordPress security advisories for a fictitious vulnerability tracked as CVE-2023-45124 to infect sites with a malicious plugin.

The campaign has been caught and reported by WordPress security experts at Wordfence and PatchStack, who published alerts on their sites to raise awareness.
[...]
Fake WordPress security advisory pushes backdoor plugin