Hackers target WordPress sites via third-party WooCommerce plugin
Hackers are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture premium plugin for WordPress to upload a PHP backdoor. [...]
EPSS 0.02 CVE-2026-27540 WordPress WooCommerce Wholesale Lead Capture US