importantSYS.SOURCE: The Hacker News• 2026-09-16T11:18:28+05:30

Critical WooCommerce Plugin Vulnerability Exploited for PHP Web Shell Deployment

#wordpress #vulnerability #web security

A critical vulnerability in the WooCommerce Wholesale Lead Capture plugin (CVE-2026-27540) allows unauthenticated attackers to upload PHP web shells for remote code execution. Two additional critical flaws in The Events Calendar plugin were also disclosed, enabling unauthorized remote code execution and potential site takeovers.

Threat actors are exploiting a critical security flaw in WooCommerce Wholesale Lead Capture, a premium WordPress plugin that has more than 6,000 active installs.

"This vulnerability can be leveraged by unauthenticated attackers to upload arbitrary files, including PHP backdoors, and achieve remote code execution," Wordfence said.

The WordPress security company said it has blocked over

Read original article

*** END OF TRANSMISSION ***

> CURATED VIDEO PLATFORM LEVERAGING HACKER NEWS RECOMMENDATIONS > NES CONTRA (1987) NATIVE PORT VIA WEBASSEMBLY > CRITICAL LINUX IPV4 TCP USE-AFTER-FREE VULNERABILITY CVE-2026-98432 WITH CVSS 9.8 SEVERITY > RESPONSIBLE DISCLOSURE OF CPU SIDE-CHANNEL VULNERABILITIES AND ETHICAL RESPONSIBILITIES IN COMPUTER SECURITY > GPT-5.6 SOL COMPLETES PEACEFUL FACTORIO RUN IN 13.5 HOURS > MEMORY LATENCY'S IMPACT ON CPU UTILIZATION IN DATABASE GROUP BY OPERATIONS > THE IMPACT OF GENERATIVE AI ON CRITICAL THINKING: A SELF-REPORTED STUDY (2025)> WILLIAM NORDHAUS, NOBEL LAUREATE IN ECONOMICS, DIES AT 85 AFTER PIONEERING CLIMATE-ECONOMY RESEARCH > CYBERSECURITY BREACH EXPLOITS LED DISPLAY SOFTWARE VULNERABILITY ACROSS MULTIPLE COUNTRIES > US COPYRIGHT OFFICE CLARIFIES AI-GENERATED CONTENT COPYRIGHT ELIGIBILITY> CURATED VIDEO PLATFORM LEVERAGING HACKER NEWS RECOMMENDATIONS > NES CONTRA (1987) NATIVE PORT VIA WEBASSEMBLY > CRITICAL LINUX IPV4 TCP USE-AFTER-FREE VULNERABILITY CVE-2026-98432 WITH CVSS 9.8 SEVERITY > RESPONSIBLE DISCLOSURE OF CPU SIDE-CHANNEL VULNERABILITIES AND ETHICAL RESPONSIBILITIES IN COMPUTER SECURITY > GPT-5.6 SOL COMPLETES PEACEFUL FACTORIO RUN IN 13.5 HOURS > MEMORY LATENCY'S IMPACT ON CPU UTILIZATION IN DATABASE GROUP BY OPERATIONS > THE IMPACT OF GENERATIVE AI ON CRITICAL THINKING: A SELF-REPORTED STUDY (2025)> WILLIAM NORDHAUS, NOBEL LAUREATE IN ECONOMICS, DIES AT 85 AFTER PIONEERING CLIMATE-ECONOMY RESEARCH > CYBERSECURITY BREACH EXPLOITS LED DISPLAY SOFTWARE VULNERABILITY ACROSS MULTIPLE COUNTRIES > US COPYRIGHT OFFICE CLARIFIES AI-GENERATED CONTENT COPYRIGHT ELIGIBILITY